CVE-2026-62279 | hargata LubeLogger up to 1.6.7 Vehicle Record Authorization VehicleController.cs DuplicateRecordsToOtherVehicles recordIds/destination vehicleIds improper authorization

September 18, 2026 Yanac

A vulnerability classified as critical has been found in hargata LubeLogger up to 1.6.7. Impacted is the function DuplicateRecordsToOtherVehicles of the file Controllers/VehicleController.cs of the component Vehicle Record Authorization. This manipulation of the argument recordIds/destination vehicleIds causes improper authorization.

This vulnerability is registered as CVE-2026-62279. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More