CVE-2026-84062
Received
Received - Intake
Authorization Bypass in BurgerEditor via User-Controlled Key
Vulnerability report for CVE-2026-84062, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-09-10
Last updated on: 2026-09-10
Assigner: JPCERT/CC
Description
Description
BurgerEditor 3.0.0 through 3.4.0 contains an issue with authorization bypass through user-controlled key. If this vulnerability is exploited, the content of the page may be altered by an attacker who can log in to the product may be caused.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| d-zero | burgereditor | From 3.0.0 (inc) to 3.4.0 (inc) |
| d-zero | burgereditor | From 2.28.0 (inc) to 2.30.0 (inc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-639 | The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data. |
