CVE-2026-6356

Published: Apr 22, 2026Modified: Jun 17, 2026

9.6

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Exploitability: 3.1 / Impact: 5.8

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A vulnerability in the web application allows standard users to escalate their privileges to those of a super administrator through parameter manipulation, enabling them to access and modify sensitive information.

Affected (1)

Products: Augmentt: Augmentt

Augmentt

1 product

Augmentt

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Augmentt Augmentt	Before 2025-10-02

Related CWEs

CWE-1220

Insufficient Granularity of Access Control

The product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to assets in a system from untrusted agents. However, implemented access controls lack required granularity, which renders the control policy too broad because it allows accesses from unauthorized agents to the security-sensitive assets.

References (2)

https://github.com/Penguinsecq/CVE-2026-6356/

Source: cret@cert.org

MitigationThird Party Advisory

https://github.com/Penguinsecq/CVE-2026-6356/

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

MitigationThird Party Advisory

Timeline

No history available yet.