CVE-2026-77425 | Unleash up to 8.0.2 Strategy Sort /api/admin/projects unprotectedUpdateStrategiesSortOrder improper authorization

September 22, 2026 Yanac

A vulnerability labeled as problematic has been found in Unleash up to 8.0.2. Affected is the function unprotectedUpdateStrategiesSortOrder of the file /api/admin/projects of the component Strategy Sort. The manipulation results in improper authorization.

This vulnerability is identified as CVE-2026-77425. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More