CVE-2026-127086 | IgnisDa Ryot up to 10.5.5 GraphQL Mutation createOrUpdateCollection updateId authorization

November 13, 2026 Yanac

A vulnerability categorized as critical has been discovered in IgnisDa Ryot up to 10.5.5. This impacts the function createOrUpdateCollection of the component GraphQL Mutation. The manipulation of the argument updateId results in authorization bypass.

This vulnerability is reported as CVE-2026-127086. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More