Authorization Bypass Vulnerability in OctoCloud by AKIN Software
CVE-2026-19083

8.8HIGH

Key Information:

Vendor

Akin Software Computer Import-export Industry And Trade Co. Ltd.

Status
Octocloud
Vendor
CVE Published:
8 October 2026

What is CVE-2026-19083?

An authorization bypass vulnerability was discovered in OctoCloud by AKIN Software, which allows unauthorized access to functionality not properly constrained by access control lists (ACLs). This could enable attackers to perform actions within the system that should be restricted, raising significant security concerns for organizations utilizing this product. Versions of OctoCloud prior to 1.12.07 are particularly vulnerable, underscoring the need for immediate updates to secure the application.

Affected Version(s)

OctoCloud 1.12.06 < 1.12.07

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Berat ARSLAN
.