Improper Access Control in Dotouch XproUPF

Publication date: 2026-05-10

Last updated on: 2026-05-11

Assigner: VulDB

Description

A vulnerability was determined in Dotouch XproUPF 2.0.0-release-088aa7c4. Affected is an unknown function of the component UPF. This manipulation causes improper access controls. A high degree of complexity is needed for the attack. The exploitability is told to be difficult. The vendor was contacted early about this disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-10

Last Modified

2026-05-11

Generated

2026-07-09

AI Q&A

2026-05-10

EPSS Evaluated

2026-07-08

NVD

CVE-2026-8233

EUVD

EUVD-2026-28984

Affected Vendors & Products

Vendor	Product	Version / Range
dotouch	xproupf	2.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-266	A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability exists in Dotouch XproUPF version 2.0.0-release-088aa7c4, specifically in an unknown function of the UPF component. It causes improper access controls, meaning that the system does not correctly restrict access to certain functions or data. Exploiting this vulnerability requires a high degree of complexity and is considered difficult.

Impact Analysis

The vulnerability can lead to improper access controls, which may allow unauthorized users with limited privileges to access or manipulate data or functions they should not have access to. However, the attack complexity is high and exploitability is difficult, which reduces the likelihood of successful exploitation.

Hi! I’m here to help you understand CVE-2026-8233. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70