CVE-2026-100727
5.3 MEDIUMPublished 2026-10-05 · Updated 2026-10-05
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected product when the file upload setting is configured as "Local".
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-552
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-102695PoC
- MEDIUMCVE-2026-105750PoC
- UNSCOREDCVE-2026-108070
- MEDIUMCVE-2026-108938PoC
- UNSCOREDCVE-2026-109162PoC
- MEDIUMCVE-2026-15915
- UNSCOREDCVE-2026-21589PoC
- MEDIUMCVE-2026-58415
Related by shared AI tags and CWE weakness class. Browse the full archive.