4.3
Medium
CVE-2026-24951 Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access…
Description
Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through <= 2.9.7.3.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| myCred 2.9 | earliest → 2.9.7.3 | No fix stated |
Other CVEs of myCred
The 11 CVEs of myCred →
CVE-2026-61968
Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access…
5.4
Medium
CVE-2026-27440
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal…
6.5
Medium
CVE-2025-54668
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal…
6.5
Medium
CVE-2025-54667
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Saad Iqbal myCred mycred allows Leveraging…
5.3
Medium