5.3
Medium
CVE-2026-66701 Unauthenticated Broken Access Control in Profile Builder <= 3.16.5 versions
Description
Unauthenticated Broken Access Control in Profile Builder <= 3.16.5 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Profile Builder 3.16 | earliest → 3.16.5 | No fix stated |
Other CVEs of Profile Builder
The 8 CVEs of Profile Builder →
CVE-2026-54855
Unauthenticated Cross Site Scripting (XSS) in Profile Builder <= 4.0.5 versions
7.1
High
CVE-2026-54854
Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions
6.3
Medium
CVE-2026-54853
Missing Authorization vulnerability in Cozmoslabs Profile Builder profile-builder allows Exploiting Incorrectly…
5.3
Medium
CVE-2026-112242
Incorrect Privilege Assignment vulnerability in Cozmoslabs Profile Builder profile-builder allows Privilege…
8.8
High