5.4
Medium
CVE-2026-25427 Subscriber Broken Access Control in eRoom <= 1.7.1 versions
Description
Subscriber Broken Access Control in eRoom <= 1.7.1 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| eRoom 1.7 | earliest → 1.7.1 | No fix stated |
Other CVEs of eRoom
The 6 CVEs of eRoom →
CVE-2026-114175
Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly…
5.4
Medium
CVE-2026-114176
Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly…
4.3
Medium
CVE-2026-62038
Unauthenticated Broken Authentication in eRoom <= 1.7.1 versions
7.3
High
CVE-2026-25405
Contributor SQL Injection in eRoom <= 1.7.1 versions
8.5
High