CVE-2026-40801

Summary

A subscriber can bypass access controls to view content they shouldn't have access to in Wordable versions up to 8.2.10, allowing unauthorized data exposure.

Exploitability

Exploitation requires a valid subscriber account with limited privileges, making it moderately difficult but possible for attackers who already have access to such accounts.

Blast radius

The impact could be significant if subscribers have access to sensitive content like customer data, internal documents, or private communications, potentially exposing thousands of records across multiple user accounts.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Wordable version 8.2.11 or later to address the broken access control vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.