CVE-2026-66091 | Apereo openEQUELLA up to 2026.0 userinfobackup uniqueId authorization

October 29, 2026 Yanac

A vulnerability described as problematic has been identified in Apereo openEQUELLA up to 2026.0. This impacts an unknown function of the file /api/userquery/userinfobackup. Executing a manipulation of the argument uniqueId can lead to missing authorization.

This vulnerability is tracked as CVE-2026-66091. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More