CVE-2026-27368
Received
Received - Intake
Missing Authorization in SeedProd Maintenance Mode Enables Unauthorized Access
Publication date: 2026-02-19
Last updated on: 2026-04-01
Assigner: Patchstack
Description
Description
Missing Authorization vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: from n/a through <= 6.19.8.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| seedprod | coming_soon_page | to 6.19.7 (inc) |
| seedprod | under_construction | to 6.19.7 (inc) |
| seedprod | maintenance_mode | to 6.19.7 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-862 | The product does not perform an authorization check when an actor attempts to access a resource or perform an action. |