Authorization Bypass Vulnerability in EdoWEB by Netiket Information Technologies

CVE-2026-16307

What is CVE-2026-16307?

An authorization bypass vulnerability exists in EdoWEB software by Netiket Information Technologies, where user-controlled keys can be exploited to gain unauthorized access to restricted functionalities. This flaw arises due to insufficient enforcement of Access Control Lists (ACLs), which can lead to serious security breaches. It is critical for users of EdoWEB versions prior to 780-g7 to review their security posture and implement necessary updates to mitigate this risk.

References