Subscriber Broken Access Control in Motors Plugin

Publication date: 2026-06-15

Last updated on: 2026-06-15

Assigner: Patchstack

Description

Subscriber Broken Access Control in Motors < 1.4.107 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-15

Last Modified

2026-06-15

Generated

2026-07-06

AI Q&A

2026-06-16

EPSS Evaluated

2026-07-04

NVD

CVE-2026-39515

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability is a Subscriber Broken Access Control issue found in Motors versions earlier than 1.4.107.

Impact Analysis

The vulnerability has a CVSS v3.1 base score of 6.5, indicating a medium severity. It allows an attacker with low privileges and network access to cause a high impact on availability, potentially disrupting service or causing denial of service.

Hi! I’m here to help you understand CVE-2026-39515. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70