CVE-2026-65452
Received Received - Intake

Unauthenticated Broken Access Control in Ebook Store

Publication date: 2026-07-23

Last updated on: 2026-07-23

Assigner: Patchstack

Description
Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-23
Last Modified
2026-07-23
Generated
2026-07-23
AI Q&A
2026-07-23
EPSS Evaluated
N/A
NVD
CVE-2026-65452
EUVD
EUVD-2026-48217

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Unauthenticated Broken Access Control issue in Ebook Store versions 6.19 and below. It allows unauthorized users to access certain functions or data without proper authentication.

Impact Analysis

An attacker could exploit this to read sensitive data or perform actions without permission. The impact is limited as it does not allow data modification or system disruption, but confidentiality is compromised.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA if it exposes personal or health data. Organizations may face fines or penalties for failing to protect such data under these regulations.

Mitigation Strategies

Update Ebook Store to the latest version (6.20 or higher) to patch the unauthenticated broken access control vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-65452. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart