MEDIUM 6.9 NVD

CVE-2026-100727

An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected pr

An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected product when the file upload setting is configured as "Local".

References

https://growi.co.jp/news/47
https://jvn.jp/en/jp/JVN24352487/

Published: 2026-10-05 · Source: NVD · Feed updated: 2026-10-05

This medium severity vulnerability with a CVSS score of 6.9 was published on 2026-10-05 via NVD.

vulnfeed aggregates 7640 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.