Authorization Bypass Vulnerability in EdoWEB by Netiket Information Technologies

CVE-2026-16309

What is CVE-2026-16309?

A critical vulnerability exists in the EdoWEB application developed by Netiket Information Technologies, which allows an attacker to bypass authorization controls by exploiting a user-controlled key. This flaw enables access to functionalities that are not adequately restricted by Access Control Lists (ACLs), potentially leading to unauthorized actions within the application. It is crucial for users of EdoWEB prior to version 780-g7 to assess their security posture and apply necessary patches to mitigate risks associated with this vulnerability.

References