CVE-2026-68951 in GROWI

Résumé

par MITRE • 31/08/2026

GROWI contains an incorrect authorization vulnerability. If this vulnerability is exploited, an unauthenticated attacker could retrieve the other user's bookmark data.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsable: Jpcert
• Réserver: 05/08/2026
• Divulgation: 31/08/2026
• Modérer: accepté
• Entrée: VDB-397241
• CPE: prêt
• CWE: CWE-285 (confirmé)
• CVSS: 5.3 (CNA)
• EPSS: 0.00000
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-68951
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-68951
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-68951/