CVE-2026-5230

Full vulnerability record from the local CVENow database.

Description

Improper Access Control, Missing Authorization vulnerability in MIA Technology Inc. Pizzy Library allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pizzy Library: from 1.0.0.26250 before 1.3.9.26250.

Severity

HIGH

CVSS score

7.1 (v3.1)

Vulnerability status

Deferred

Source identifier

[email protected]

Published

2026-06-15 14:16:37.427000

Last modified

2026-10-25 23:10:00.167000

View original CVE JSON

{
  "id": "CVE-2026-5230",
  "sourceIdentifier": "[email protected]",
  "published": "2026-06-15T14:16:37.427",
  "lastModified": "2026-10-25T23:10:00.167",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Access Control, Missing Authorization vulnerability in MIA Technology Inc. Pizzy Library allows Exploiting Incorrectly Configured Access Control Security Levels.\n\nThis issue affects Pizzy Library: from 1.0.0.26250 before 1.3.9.26250."
    },
    {
      "lang": "es",
      "value": "Control de acceso inadecuado, vulnerabilidad por falta de autorización en la biblioteca Pizzy de MIA Technology Inc. permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente.\n\nEste problema afecta a la biblioteca Pizzy: desde 1.0.0.26250 antes de 1.3.9.26250."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "MIA Technology Inc.",
          "product": "Pizzy Library",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "1.0.0.26250",
              "lessThan": "1.3.9.26250",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
          "baseScore": 7.1,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 4.2
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-15T15:57:39.043602Z",
          "id": "CVE-2026-5230",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        },
        {
          "lang": "en",
          "value": "CWE-862"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0383",
      "source": "[email protected]"
    }
  ]
}