CVE-2026-19083: IDOR in AKIN Software's OctoCloud
Published Oct 8, 2026
·Updated
Authorization bypass through User-Controlled key vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. OctoCloud allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects OctoCloud: from 1.12.06 before 1.12.07.
Affected Software
1 affected component
AKIN Software OctoCloud>=1.12.06<1.12.07
Event History
Oct 8, 2026
CVE Published
via MITRE·11:32 AM
Data Sourced
via MITRE·11:32 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which OctoCloud deployments are affected?
OctoCloud versions from 1.12.06 before 1.12.07 are affected. Version 1.12.07 is not listed as affected.
2
What level of access does an attacker need?
The vector indicates network reachability and low privileges are required. No user interaction is required.
3
What is the likely impact of successful exploitation?
Successful exploitation can compromise confidentiality, integrity, and availability at high impact levels. The issue involves functionality that is not properly constrained by access-control lists.