CVE-2026-50881

Published: Jun 15, 2026Modified: Jun 17, 2026Deferred

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.8 / Impact: 5.2

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Incorrect access control in the impworks Bonsai v6.0 allows authenticated attackers with Editor privileges to escalate privileges to Administrator and execute unauthorized account, password, and configuration changes.

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://gist.github.com/pyuysig/68754e4c40161ea27fcf80be46c59e7c

Source: cve@mitre.org

https://gist.github.com/pyuysig/68754e4c40161ea27fcf80be46c59e7c

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.