CVE-2026-19358: 3CORESec Trapdoor DefaultFunction access control
Published Aug 9, 2026
·Updated
A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected by this vulnerability is the function DefaultFunction. This manipulation causes improper access controls. The attack can be initiated remotely. The vendor was contacted early about this disclosure.
Affected Software
1 affected component
3CORESec Trapdoor<=1.2.2
Event History
Aug 9, 2026
CVE Published
via MITRE·03:45 PM
Data Sourced
via MITRE·03:45 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-19358?
CVE-2026-19358 has a medium severity rating of 6.3.
2
How do I fix CVE-2026-19358?
To address CVE-2026-19358, update the 3CORESec Trapdoor software to version 1.2.3 or later.
3
What systems are affected by CVE-2026-19358?
CVE-2026-19358 affects 3CORESec Trapdoor versions up to 1.2.2.
4
What type of vulnerability is CVE-2026-19358?
CVE-2026-19358 is a vulnerability related to improper access controls in the DefaultFunction.
5
Can CVE-2026-19358 be exploited remotely?
Yes, CVE-2026-19358 can be exploited remotely due to the nature of the vulnerability.