CVE-2026-55551 | infonl dimpact-zaakafhandelcomponent up to 5.1.x By-Id Read Endpoints ZaakRestService.kt improper authorization

October 30, 2026 Yanac

A vulnerability was found in infonl dimpact-zaakafhandelcomponent up to 5.1.x. It has been declared as problematic. Affected by this issue is the function listBesluitenForZaakUUID/listBesluitHistorie/downloadProcessDiagram/listAfzendersVoorZaak of the file src/main/kotlin/nl/info/zac/app/zaak/ZaakRestService.kt of the component By-Id Read Endpoints. Executing a manipulation can lead to improper authorization.

This vulnerability is tracked as CVE-2026-55551. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More