CVE-2026-40788 Subscriber Broken Access Control in ChatBot <= 7.9.7 versions

Description

Subscriber Broken Access Control in ChatBot <= 7.9.7 versions.

Affected products and versions

Product	Affected versions	Fixed in
ChatBot 7.9	earliest → 7.9.7	No fix stated

Other CVEs of ChatBot

The 8 CVEs of ChatBot →

CVE-2026-57363 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud… 7.1 High CVE-2026-57362 Unauthenticated Cross Site Scripting (XSS) in ChatBot <= 8.3.2 versions 7.1 High CVE-2026-32499 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuantumCloud… 9.3 Critical CVE-2025-64277 Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access… 5.3 Medium