CVE-2026-115624

CVE-2026-115624CVE-2026-115624

Description

GROWI contains a missing authorization check vulnerability in its collaborative editing feature. By exploiting this vulnerability, a user with read-only permission, including a guest user, or a user in pending, suspended, or invited status may modify page drafts.

Scoring

CVSS 5.3 ()
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Last modified2026-10-28
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.