CVEvulnerability

CVE-2026-50881

8.1 HIGH Published 2026-06-15 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2026-06-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-284

Description

Incorrect access control in the impworks Bonsai v6.0 allows authenticated attackers with Editor privileges to escalate privileges to Administrator and execute unauthorized account, password, and configuration changes.

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References