CVE-2026-65931

Received Received - Intake

Authenticated Improper Authorization in LimeSurvey Community Edition

Publication date: 2026-08-27

Last updated on: 2026-08-27

Assigner: Fluid Attacks

Description

LimeSurvey Community Edition 7.0.5 contains an authenticated improper authorization vulnerability in the survey menu entry creation endpoint. An authenticated user with only the global settings:read permission can directly invoke POST /index.php/admin/menuentries/sa/create and create new survey menu entries without the expected settings:update privilege. The endpoint also allows the attacker to submit menu IDs that the normal interface and intended update workflow restrict for non-superadministrators, enabling unauthorized changes to administrative navigation records. This issue affects LimeSurvey: 7.0.5.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-27

Last Modified

2026-08-27

Generated

2026-08-28

AI Q&A

2026-08-28

EPSS Evaluated

N/A

NVD

CVE-2026-65931

Affected Vendors & Products

Vendor	Product	Version / Range
limesurvey	community_edition	7.0.5

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

LimeSurvey Community Edition 7.0.5 has an improper authorization vulnerability in the survey menu entry creation endpoint. An authenticated user with only global settings read permission can exploit this by directly accessing the POST /index.php/admin/menuentries/sa/create endpoint to create new survey menu entries without the required settings update privilege. The vulnerability allows submitting restricted menu IDs, bypassing intended authorization checks and making unauthorized changes to administrative navigation records.

Detection Guidance

Check for unauthorized menu entries in LimeSurvey's admin panel by reviewing the survey menu entries list. Look for unexpected entries created by non-superadministrator users. Inspect server logs for POST requests to /index.php/admin/menuentries/sa/create from users without superadministrator privileges.

Impact Analysis

An attacker with minimal privileges could create unauthorized menu entries in the administrative interface. This could allow manipulation of navigation, potential access to restricted areas, or disruption of survey management. The unauthorized entries persist even if the server returns an error after database write.

Compliance Impact

This vulnerability could potentially compromise data integrity and access controls, which are critical for GDPR and HIPAA compliance. Unauthorized menu entries might allow attackers to access sensitive survey data or administrative functions, violating confidentiality and integrity requirements of these regulations.

Mitigation Strategies

Upgrade to a patched version of LimeSurvey if available. Temporarily restrict access to the POST /index.php/admin/menuentries/sa/create endpoint via web server rules. Monitor admin panel activity for unauthorized changes and review user permissions to ensure only superadministrators can create menu entries.

Hi! I’m here to help you understand CVE-2026-65931. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70