CVE-2026-124026 | karlomikus Bar Assistant up to 6.10.x Cocktail Controller CocktailController::copy improper authorization

November 6, 2026 Yanac

A vulnerability, which was classified as critical, has been found in karlomikus Bar Assistant up to 6.10.x. The affected element is the function CocktailController::copy of the component Cocktail Controller. This manipulation causes improper authorization.

This vulnerability is tracked as CVE-2026-124026. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More