CVE-2026-62072

Summary

The flaw allows unauthorized access to protected resources due to broken access control, impacting subscriber data in Progress Planner versions up to 1.10.0.

Exploitability

Exploitation requires access to the affected version of Progress Planner and knowledge of the broken access control mechanism, making it moderately difficult.

Blast radius

If exploited, the flaw could lead to data breaches and unauthorized access to sensitive subscriber information.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Progress Planner version 1.10.1 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.