4.3
Moyenne
CVE-2026-66247 iControl is affected by an insecure Cross-Origin Resource Sharing (CORS) policy vulnerability, which could allow a…
Description
iControl is affected by an insecure Cross-Origin Resource Sharing (CORS) policy vulnerability, which could allow a malicious website to execute cross-origin requests with included credentials, enabling an attacker to access and exfiltrate sensitive data within the context of the victim's active session.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| iControl | 4.5.0 | Pas de correctif indiqué |
Autres CVE de iControl
Les 6 CVE de iControl →
CVE-2026-66253
iControl is affected by a Session Timeout vulnerability, which could allow an attacker to exploit an unattended or…
3.1
Faible
CVE-2026-66249
iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies…
3.1
Faible
CVE-2026-66248
iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacker to…
3.1
Faible
CVE-2026-66246
iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing…
8.8
Élevée