CVE-2026-86810

Description

A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely. Upgrading to version 1.10.0 is sufficient to resolve this issue. The patch is named 6fc91c49eebdb8bfdfeed71cb50a5d97eac70f24. It is advisable to upgrade the affected component.

References

https://vuldb.com/vuln/399814/cti

https://vuldb.com/vuln/399814

https://vuldb.com/submit/911107

https://vuldb.com/cve/CVE-2026-86810

https://github.com/Open-Web-Analytics/Open-Web-Analytics/releases/tag/1.10.0

https://github.com/Open-Web-Analytics/Open-Web-Analytics/pull/961

https://github.com/Open-Web-Analytics/Open-Web-Analytics/issues/959

https://github.com/Open-Web-Analytics/Open-Web-Analytics/commit/6fc91c49eebdb8bfdfeed71cb50a5d97eac70f24

https://github.com/Open-Web-Analytics/Open-Web-Analytics/

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-74161

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

CVSS v4

EPSS