CVE-2026-55518 | avo-hq Avo up to 3.32.0/4.0.0.beta.50 Write Endpoint associations_controller.rb create improper authorization

July 17, 2026 Yanac

A vulnerability was found in avo-hq Avo up to 3.32.0/4.0.0.beta.50. It has been classified as critical. This impacts the function create of the file app/controllers/avo/associations_controller.rb of the component Write Endpoint. This manipulation causes improper authorization.

This vulnerability appears as CVE-2026-55518. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More