Missing Authorization Vulnerability in Qorela DC by Interprobe Information Technologies Inc.
CVE-2026-87748

8.8HIGH

Key Information:

Vendor

Interprobe Information Technologies Inc.

Status
Qorela Dc
Vendor
CVE Published:
29 September 2026

What is CVE-2026-87748?

A vulnerability exists in Qorela DC developed by Interprobe Information Technologies Inc., whereby missing authorization checks can lead to privilege abuse, allowing unauthorized access and potential compromise of user data. Versions prior to 1.6.2 are affected, underscoring the necessity for timely updates to safeguard against exploitation.

Affected Version(s)

Qorela DC 1.6.1-RC29

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Alaeddin BERKSOY
.