Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, only classes present in the SELECT clause are protected by the silos access check in OQL. This issue has been fixed in version 3.2.3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
CVE-2026-34948 Combodo iTop is a web based IT service management tool. Prior to 3.2.3, only classes present in the SELECT clause are protected by the silos access check in OQL. This… https://www.cve.org/CVERecord?id=CVE-2026-34948
Post summary
The tweet outlines a newly disclosed issue in Combodo iTop, details the vulnerability mechanism, notes a patch in version 3.2.3, but provides no exploits, PoC, or evidence of active attacks.
🚨*CVE* CVE-2026-34948 Combodo iTop is a web based IT service management tool. Prior to 3.2.3, only classes present in the SELECT clause are protected by the silos access check in OQL. This… https://www.cve.org/CVERecord?id=CVE-2026-34948 ----- Traducción: CVE-2026-34948 Com… http://infoflow.cloud`
Post summary
The tweet announces CVE-2026-34948, describing a privilege‑escalation flaw in Combodo iTop’s OQL queries and noting that v3.2.3 provides the fix, but it supplies neither a PoC nor evidence of active exploitation.