CVE-2020-26506 - CVE House
Back to Database
Status published Medium CVE-2020-26506

An Authorization Bypass vulnerability in the Marmind web application with...

Vulnerability Description

An Authorization Bypass vulnerability in the Marmind web application with version 4.1.141.0 allows users with lower privileges to gain control to files uploaded by administrative users. The accessed files were not visible by the low privileged users in the web GUI.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-26506

Credits & Attribution

No credits recorded in the NVD database.

References

More from marmind

View All →
CVE-2020-26507
A CSV Injection (also known as Formula Injection) vulnerability in...
High 7.8
CVE-2020-26505
A Stored Cross-Site Scripting (XSS) vulnerability in the “Marmind” web...
Medium 6.1

Affected Vendor

Affected Software

marmind
Vulnerable Versions:
4.1.141.0

Timeline

Official Publish: November 5th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.