Authorization Bypass Vulnerability in PDF Certificate Handler for IOMAD by IOMAD
CVE-2026-113702

5.3MEDIUM

Key Information:

Vendor

IOMAD

Status
Iomad
Vendor
CVE Published:
9 November 2026

What is CVE-2026-113702?

A security flaw exists in the PDF Certificate Handler component of IOMAD, specifically in the local_iomad_pluginfile function. This vulnerability allows for unauthorized access, enabling remote attackers to bypass standard authorization checks. Users are urged to apply the provided patch to mitigate potential risks associated with this issue. The patch is identified in multiple commits, ensuring a proper resolution to enhance system security.

Affected Version(s)

iomad 4.5.0

iomad 4.5.1

iomad 4.5.2

References

https://vuldb.com/vuln/433093
vdb-entrytechnical-description
https://vuldb.com/vuln/433093/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-113702
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

VulDB GitHub Commit Analyzer
VulDB CNA Team
.