5.3
Medium
CVE-2026-54853 Missing Authorization vulnerability in Cozmoslabs Profile Builder profile-builder allows Exploiting Incorrectly…
Description
Missing Authorization vulnerability in Cozmoslabs Profile Builder profile-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Profile Builder: from n/a through 4.0.5.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Profile Builder 4.0 | earliest → 4.0.5 | No fix stated |
Other CVEs of Profile Builder
The 8 CVEs of Profile Builder →
CVE-2026-54855
Unauthenticated Cross Site Scripting (XSS) in Profile Builder <= 4.0.5 versions
7.1
High
CVE-2026-54854
Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions
6.3
Medium
CVE-2026-112242
Incorrect Privilege Assignment vulnerability in Cozmoslabs Profile Builder profile-builder allows Privilege…
8.8
High
CVE-2026-96338
Subscriber Cross Site Scripting (XSS) in Profile Builder <= 4.0.2 versions
6.5
Medium