CVE-2026-39637Disclosure

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Missing Authorization vulnerability in SpabRice Mogi mogi allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mogi: from n/a through <= 1.2.3.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-04-12); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-04-12: 1Mentions · 2026-05-02: 1Technical Details · 2026-04-12: 1Technical Details · 2026-05-02: 104-1205-02
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-39637 Missing Authorization vulnerability in SpabRice Mogi mogi allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mogi: from n/a th… https://www.cve.org/CVERecord?id=CVE-2026-39637

    Post summary

    The snippet announces CVE-2026-39637 as a missing‑authorization flaw in SpabRice Mogi, offering basic technical details but no PoC, exploit code, or patch information.

    0001073
    57.1K followersView on X
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Disclosure

    CVE-2026-39637: SpabRice Mogi plugin &lt;=1.2.3 misses auth. Unauthenticated network access to sensitive data. CVSS 5.3. No patch. Assume compromise. #CVE #AuthBypass #AppSec #infosec #cybernews #security #hacking Info: https://www.valtersit.com/cve/2026/04/cve-2026-39637/

    Post summary

    The post announces CVE-2026-39637, detailing an authentication bypass in the SpabRice Mogi plugin with a CVSS score of 5.3 and noting that no patch is available.

    0000082
    889 followersView on X

Explore more