Vulnerabilities CVE-2026-40127

CVE-2026-40127

Medium

Open

TLP:CLEAR

Authorization Bypass Through User-Controlled Key in OutSystems Lifetime

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any application. This issue was fixed in OutSystems Lifetime version 11.28.2.3955

Details

CVSS Score: 5.3
EPSS Score ⓘ: 0.32%

24.3th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Confidence: 90%
Published: May 25, 2026
Last Modified: Aug 11, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.