CVE-2026-87748: Privilege Escalation via Account Takeover in Interprobe's Qorela DC

Q: What access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges (PR:L). Exploitation can be performed over the network and does not require user interaction.

Q: What is the potential impact if the vulnerability is exploited?

Successful exploitation may allow privilege abuse through account takeover. The reported CVSS impacts indicate high potential impact to confidentiality, integrity, and availability.

Q: Which Qorela DC versions should be remediated?

Qorela DC versions from 1.6.1-RC29 up to, but not including, v1.6.2 are affected. Upgrade to v1.6.2 or later if available.

Published Sep 29, 2026

Updated

Missing Authorization vulnerability in Interprobe Information Technologies Inc. Qorela DC allows Privilege Abuse.

This issue affects Qorela DC: from 1.6.1-RC29 before v1.6.2.

Affected Software

1 affected component

Interprobe Information Technologies Qorela DC>=1.6.1-RC29<1.6.2

Event History

Sep 29, 2026

CVE Published

via MITRE·11:51 AM

Data Sourced

via MITRE·11:51 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·12:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges (PR:L). Exploitation can be performed over the network and does not require user interaction.

What is the potential impact if the vulnerability is exploited?

Successful exploitation may allow privilege abuse through account takeover. The reported CVSS impacts indicate high potential impact to confidentiality, integrity, and availability.

Which Qorela DC versions should be remediated?