CVE-2026-107395 | Indico up to 3.3.12 Legacy Session Export API privileges management

October 8, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Indico up to 3.3.12. This affects an unknown function of the component Legacy Session Export API. The manipulation leads to improper privilege management.

This vulnerability is uniquely identified as CVE-2026-107395. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More