CVE-2026-102915

Summary

This flaw allows unauthorized access to subscriber data due to broken access control in WPO365 versions up to 44.1, posing a significant security risk.

Exploitability

Exploitation requires access to the affected WPO365 version and knowledge of the subscriber data structure, making it moderately difficult.

Blast radius

If exploited, the impact could be severe, leading to unauthorized access to sensitive subscriber information.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to WPO365 version 44.2 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.