CVE-2026-7502: LinkStackOrg LinkStack Management Endpoint UserController.php saveLink authorization
A security vulnerability has been detected in LinkStackOrg LinkStack up to 4.8.6. The affected element is the function saveLink of the file app/Http/Controllers/UserController.php of the component Management Endpoint. The manipulation leads to authorization bypass. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The pull request to fix this issue awaits acceptance.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7502?
CVE-2026-7502 has been classified with a high severity level due to unauthorized access risks in the LinkStack application.
How do I fix CVE-2026-7502?
To fix CVE-2026-7502, update LinkStack to version 4.8.7 or later where the vulnerability has been addressed.
What versions of LinkStack are affected by CVE-2026-7502?
CVE-2026-7502 affects LinkStack versions up to and including 4.8.6.
What component is vulnerable in CVE-2026-7502?
The vulnerable component in CVE-2026-7502 is the saveLink function in app/Http/Controllers/UserController.php.
What kind of vulnerability is CVE-2026-7502?
CVE-2026-7502 is an authorization vulnerability that allows unauthorized users to access and save links.