CVE-2026-122007 | Oqtane Framework up to 10.2.x Settings Controller SettingController.cs IsAuthorized entityId access control

November 4, 2026 Yanac

A vulnerability was found in Oqtane Framework up to 10.2.x and classified as problematic. This affects the function IsAuthorized of the file SettingController.cs of the component Settings Controller. Executing a manipulation of the argument entityId can lead to improper access controls.

This vulnerability is tracked as CVE-2026-122007. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More