Access Control Vulnerability in 3CORESec Trapdoor by 3CORESec
CVE-2026-19358

5.3MEDIUM

Key Information:

Vendor

3coresec

Status
Trapdoor
Vendor
CVE Published:
9 August 2026

What is CVE-2026-19358?

A significant security weakness has been identified in the 3CORESec Trapdoor up to version 1.2.2. This vulnerability affects the DefaultFunction, allowing malicious actors to exploit improper access controls. Attackers can initiate this manipulation remotely, potentially compromising the integrity and security of sensitive data. Early disclosure was made to the vendor regarding this issue, highlighting the importance of addressing such critical vulnerabilities promptly.

Affected Version(s)

Trapdoor 1.2.0

Trapdoor 1.2.1

Trapdoor 1.2.2

References

https://vuldb.com/vuln/387212
vdb-entrytechnical-description
https://vuldb.com/vuln/387212/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-19358
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

changli (VulDB User)
VulDB CNA Team
.