Authorization Bypass in BurgerEditor by D-Zero
CVE-2026-84062

5.3MEDIUM

Key Information:

Vendor

D-zero Co.,ltd.

Status
Burgereditor
Vendor
CVE Published:
10 September 2026

What is CVE-2026-84062?

BurgerEditor versions 3.0.0 through 3.4.0 are affected by an authorization bypass vulnerability stemming from a user-controlled key issue. This flaw allows attackers with login access to alter the content of web pages, potentially leading to unauthorized changes and disruption of service. It is crucial for users to apply security updates and limit access to authorized personnel only, ensuring the integrity of their content management system.

Affected Version(s)

BurgerEditor 3.0.0 through 3.4.0

References

https://jvn.jp/en/jp/JVN21088484/
https://burger.d-zero.co.jp/blogs/archives/3

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.