CVE-2026-4320General

LOWCVSS 9.3 · CRITICAL

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Authorization Bypass vulnerability in Creartia's ICMS software could allow an attacker to gain unauthorized access to protected features by manipulating the HTTP redirect headers of the login process, causing the script to continue running and enabling privilege escalation without the need for credentials.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://www.incibe.es/en/incibe-cert/notices/aviso/authorization-bypass-icms-content-management-creartia-internet-consulting

Weakness type (CWE)

CWE-288

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
General: 2 classified signals
Disclosure: 1 classified signal
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification2 categories

General

266.7%

Disclosure

133.3%

Referenced assets3 URLs

By indicator

Full discourse3 posts

INCIBE-CERT@incibe_cert145d
General
⚠️#INCIBEaviso | Omisión de autorización en ICMS Gestión de Contenidos de #CreartiaInternetConsulting #CVE CVE-2026-4320 https://www.incibe.es/incibe-cert/alerta-temprana/avisos/omision-de-autorizacion-en-icms-gestion-de-contenidos-de-creartia-internet #AvisosDeSeguridad #TI #CNA #0day
Post summary
The post simply alerts about CVE-2026-4320 involving omitted authorization in ICMS but provides no technical, PoC, or exploitation information.
00010535
42.8K followersView on X
CVEarity@CVEarity144d
General
⚡ New CVE Alert: CVE-2026-4320 📊 Severity: 9.3 🚨 Risk Level: Critical 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-4320 #CVE-2026-4320 #CVE #Critical #CyberSecurity #InfoSec https://t.co/2rgSSiwiZ7
Post summary
The post is a brief notification of a newly disclosed CVE-2026-4320 with high severity, but it contains no technical, exploitation, or remediation details.
0000054
160 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds145d
Disclosure
CVE-2026-4320 Authorization Bypass in Creartia ICMS via HTTP Redirect Header Manipulation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4320
Post summary
CVE-2026-4320 is disclosed as an authorization bypass vulnerability in Creartia ICMS that exploits HTTP redirect header manipulation; no PoC, exploit, patch, or active exploitation details are mentioned.
0000069
4.0K followersView on X

Explore more

Back to dashboard