CVE-2026-104991 | Alanaktion Phproject up to 1.8.6 Issue Endpoint allowAccess improper authorization

October 2, 2026 Yanac

A vulnerability classified as critical has been found in Alanaktion Phproject up to 1.8.6. Impacted is the function allowAccess of the component Issue Endpoint. This manipulation causes improper authorization.

The identification of this vulnerability is CVE-2026-104991. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More