All vulnerabilities

Servers and applications

CVE-2026-115195

Broken Access Control in Stats API

Severity
Medium 6.5
Published
26 Oct 2026
Last changed
26 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
5.2.12, 6.0.10, 7.2.2
Also known as
GHSA-7j28-9rg4-wg63
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
MauticServers and applications · github:mautic/mautic
  • From 2.3.0 before 5.2.12
  • From 6.0.0 before 6.0.10
  • From 7.0.0 before 7.2.2

References