4.3 Medium

CVE-2026-24636 Missing Authorization vulnerability in Syed Balkhi Sugar Calendar (Lite) sugar-calendar-lite allows Exploiting…

Description

Missing Authorization vulnerability in Syed Balkhi Sugar Calendar (Lite) sugar-calendar-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sugar Calendar (Lite): from n/a through <= 3.9.1.

Affected products and versions

Product	Affected versions	Fixed in
Sugar Calendar (Lite) 3.9	earliest → 3.9.1	No fix stated

Do you use Sugar Calendar (Lite)?

Track this CVE Watch Sugar Calendar (Lite) Check my SBOMs

www.cveye.io/en/cve/CVE-2026-24636

Timeline

Published January 23, 2026
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE