Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any application. This issue was fixed in OutSystems Lifetime version 11.28.2.3955
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-40127 OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the C… https://www.cve.org/CVERecord?id=CVE-2026-40127
Post summary
OutSystems Lifetime has been disclosed with CVE-2026-40127, an authorization bypass via the ApplicationID parameter; no PoC, exploit, or patch information is provided.
Vulnerability in Lifetime software https://ift.tt/rh7vpcW Authorization Bypass Through User-Controlled Key vulnerability (CVE-2026-40127) has been found in OutSystems Lifetime software. Introduction to Malware Binary Triage (IMBT) Course Looking to level up your skills? Get…
Post summary
The post discloses CVE-2026-40127, an authorization bypass vulnerability in OutSystems Lifetime software, without providing exploit code, patch details, or evidence of active exploitation.