CVE-2026-76910 | Unleash up to 8.0.2 Feature Clone clone cloneFeatureToggle improper authorization

September 22, 2026 Yanac

A vulnerability described as critical has been identified in Unleash up to 8.0.2. Affected by this issue is the function cloneFeatureToggle of the file /api/admin/projects/:projectId/features/:featureName/clone of the component Feature Clone. Such manipulation leads to improper authorization.

This vulnerability is listed as CVE-2026-76910. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More