CVE-2026-7510: OWAP DefectDojo Benchmark/Engagement/Product/Survey authorization
A vulnerability was determined in OWAP DefectDojo up to 2.55.4. Affected by this vulnerability is an unknown functionality of the component Benchmark/Engagement/Product/Survey. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.56.0 addresses this issue. This patch is called eb6120a379185d37eb1af17b69bb5614a830ab1f. Upgrading the affected component is recommended.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OWAP DefectDojo Benchmark/Engagement/Product/Surveyto a version that resolves this vulnerability.Fixed in 2.56.0Patch eb6120a379185d37eb1af17b69bb5614a830ab1f
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7510?
The severity of CVE-2026-7510 is classified as a vulnerability that allows an authorization bypass in OWASP DefectDojo up to version 2.55.4.
How do I fix CVE-2026-7510?
To fix CVE-2026-7510, you should upgrade OWASP DefectDojo to the latest version beyond 2.55.4.
What are the potential impacts of CVE-2026-7510?
The potential impacts of CVE-2026-7510 include unauthorized access or manipulation of Benchmark/Engagement/Product/Survey functionalities.
Which versions of OWASP DefectDojo are affected by CVE-2026-7510?
CVE-2026-7510 affects all versions of OWASP DefectDojo up to and including 2.55.4.
Is there a workaround for CVE-2026-7510?
There are no specific workarounds provided for CVE-2026-7510, and updating to a secure version is recommended.