CVE-2026-28553
Medium · 6.9CVSS
6.9
EPSS
0.2%
Published
Apr 13, 2026
CISA due date
—
The record
Vulnerability of improper permission control in the theme setting module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-49311 Permission control vulnerability in the event notification module.Impact: Successful… CWE-275
- CVE-2026-75978 A security vulnerability has been detected in xianrendzw EasyReport up to… CWE-275
- CVE-2026-19376 A vulnerability has been found in Uasoft Badaso 3.0.0-alpha. CWE-275
- CVE-2026-12201 A flaw has been found in IObit Malware Fighter up to 13.2.0. CWE-275
- CVE-2026-41976 Permission control vulnerability in the audio framework. Impact: Successful exploitation… CWE-275
- CVE-2026-41978 Permission control vulnerability in the clone module. Impact: Successful exploitation of… CWE-275
- CVE-2026-41969 Permission control vulnerability in the projection module. Impact: Successful… CWE-275
- CVE-2014-1632 htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and… CWE-275