CVE-2026-18258

{
  "id": "CVE-2026-18258",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-06T16:16:37.727",
  "lastModified": "2026-10-23T21:10:00.157",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Authorization bypass in the Line, LineTranscription, VirtualCollection, tag and process API endpoints in Scripta/eScriptorium through 26.04.1 allows a remote authenticated user to read, modify and delete other users' transcription content via primary keys supplied in the request body, which are queried against the global model manager instead of the request-scoped queryset"
    },
    {
      "lang": "es",
      "value": "Omisión de autorización en los endpoints de la API Line, LineTranscription, VirtualCollection, tag y process en Scripta/eScriptorium hasta la versión 26.04.1 permite a un usuario remoto autenticado leer, modificar y eliminar contenido de transcripción de otros usuarios a través de claves primarias suministradas en el cuerpo de la solicitud, las cuales son consultadas contra el gestor de modelos global en lugar del queryset con ámbito de solicitud."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Scripta",
          "product": "eScriptorium",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThanOrEqual": "26.4.1",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-06T15:45:38.837492Z",
          "id": "CVE-2026-18258",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-639"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:escriptorium:escriptorium:*:*:*:*:*:*:*:*",
              "versionEndIncluding": "26.04.1",
              "matchCriteriaId": "362E7B9E-A763-49D5-B9FE-9105E6759CCB"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://gitlab.com/scripta/escriptorium/-/work_items/1226",
      "source": "[email protected]",
      "tags": [
        "Permissions Required"
      ]
    }
  ]
}