CVE-2026-66091
Received Received - Intake

Unauthenticated Information Disclosure in openEQUELLA

Publication date: 2026-10-29

Last updated on: 2026-10-29

Assigner: MON-CSIRT

Description
In openEQUELLA before 2026.1, the GET /api/userquery/userinfobackup endpoint performs no authentication or authorisation check. An unauthenticated attacker who supplies another user's uniqueId can retrieve that user's stored personal details (username, first name, last name and email address) within the same institution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-29
Last Modified
2026-10-29
Generated
2026-10-29
AI Q&A
2026-10-29
EPSS Evaluated
N/A
NVD
CVE-2026-66091
EUVD
EUVD-2026-112567

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Apereo Foundation openEQUELLA 2019.2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in openEQUELLA before version 2026.1. The GET /api/userquery/userinfobackup endpoint lacks authentication or authorization checks. An unauthenticated attacker can exploit this by providing another user's uniqueId to retrieve that user's personal details such as username, first name, last name, and email address within the same institution.

Detection Guidance

To detect this vulnerability, check if the GET /api/userquery/userinfobackup endpoint is accessible without authentication. Use curl to test the endpoint with a user ID parameter, e.g., curl -v http://<target>/api/userquery/userinfobackup?uniqueId=<user_id>. If the endpoint returns user details without requiring credentials, the system is vulnerable.

Impact Analysis

An attacker could access sensitive personal information of other users, including their names and email addresses. This could lead to privacy breaches, identity theft, or targeted phishing attacks against affected individuals.

Compliance Impact

This vulnerability likely violates data protection regulations such as GDPR and HIPAA by exposing personal data without proper access controls. It could result in non-compliance penalties, legal liabilities, and reputational damage for organizations using the affected software.

Mitigation Strategies

Immediately upgrade openEQUELLA to version 2026.1 or later to address the missing authentication check. If an upgrade is not immediately possible, restrict network access to the vulnerable endpoint via firewall rules or disable the endpoint if unused.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-66091. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart