Authentication Bypass Vulnerability in Bizwell xClick
CVE-2026-88262

8.7HIGH

Key Information:

Vendor

Bizwell

Status
Xclick
Vendor
CVE Published:
15 September 2026

What is CVE-2026-88262?

The insufficient session expiration vulnerability in Bizwell xClick allows attackers to bypass authentication mechanisms, potentially granting unauthorized access to sensitive user data. This issue affects the xClick product in its R2, R3, and R3.1 versions, highlighting the need for immediate security assessments and updates to mitigate risks.

Affected Version(s)

xClick R2

xClick R3

xClick R3.1

References

https://www.bizwell.net/solutions/groupware

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Hyunho, Cho (조현호)
.