CVE-2026-119646 | Open Web Analytics up to 1.14.0 Report Scoping siteId/session_id/order_id improper authorization

October 30, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Open Web Analytics up to 1.14.0. This affects an unknown function of the component Report Scoping. Performing a manipulation of the argument siteId/session_id/order_id results in improper authorization.

This vulnerability is cataloged as CVE-2026-119646. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More