CVE-2026-18276 | Scripta eScriptorium up to 26.04.1 websocket consumer object_cls/object_pk missing authentication

August 6, 2026 Yanac

A vulnerability was found in Scripta eScriptorium up to 26.04.1. It has been classified as problematic. This issue affects some unknown processing of the component websocket consumer. Performing a manipulation of the argument object_cls/object_pk results in missing authentication.

This vulnerability was named CVE-2026-18276. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More