DailyCVE@dailycve
🔴 PatrowlManager Authorization Bypass #CVE-2026-92753 High -DC-Oct2026-2721 https://dailycve.com/patrowlmanager-authorization-bypass-cve-2026-92753-high-dc-oct2026-2721/
0000010
238 followersView on X
CVE-2026-92753
LOWCVSS 7.1 · HIGHSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
PatrowlManager through 1.8.4 contains an authorization bypass vulnerability in the events and alerts API endpoints that lack ownership filtering. Authenticated attackers can read platform event history, delete arbitrary events, and modify alerts belonging to other users.
0.0/ 10 priority
Sources & remediation
Other references
- https://github.com/Patrowl/PatrowlManager
- https://github.com/Patrowl/PatrowlManager/blob/1.8.4/events/apis.py#L15-L60
- https://github.com/Patrowl/PatrowlManager/issues/474
- https://www.vulncheck.com/advisories/patrowlmanager-through-1.8.4-authorization-bypass-via-events-api
- https://github.com/Patrowl/PatrowlManager/issues/474
Weakness type (CWE)
CWE-862
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day