CVE-2026-94152

LOWCVSS 2.1 · LOW

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security vulnerability has been detected in Omega Solution FBP Fulfillment by People 2025. This impacts an unknown function of the file /user/ of the component User Profile API. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-285CWE-639

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

Hugo | DevOps | Cybersecurity@HugoValters21h
CVE-2026-94152: auth bypass in Omega Solution FBP Fulfillment by People 2025, User Profile API. CVSS 4.3, public exploit, vendor unresponsive. No patch - restrict access now. #CVE #infosec https://www.valtersit.com/cve/CVE-2026-94152/ #OmegaSolution #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker
0000041
1.1K followersView on X

Explore more

Back to dashboard