CVE-2026-59504
Received Received - Intake

Client-Side Security Bypass in Application

Vulnerability report for CVE-2026-59504, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: Israel National Cyber Directorate

Description

CWE-602: Client-Side Enforcement of Server-Side Security

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-08-13
AI Q&A
2026-08-13
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-602 The product is composed of a server that relies on the client to implement a mechanism that is intended to protect the server.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a client-side application enforcing security rules that should be handled server-side. This means security decisions are made on the user's device rather than the server, allowing attackers to bypass these controls by modifying client-side logic or requests.

Impact Analysis

An attacker could exploit this to bypass security measures, such as authentication or authorization checks, leading to unauthorized access to sensitive data or actions. The high CVSS score (9.1) indicates a severe risk of data compromise or system manipulation.

Compliance Impact

This vulnerability could lead to unauthorized data access or processing, violating GDPR's data protection principles or HIPAA's security requirements. Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Implement server-side validation and enforce security policies on the server rather than relying on client-side checks. Ensure all input is validated and sanitized before processing.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-59504. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart