CVE-2026-92753highCWE-862

CVE-2026-92753: high-severity vulnerability in PatrowlManager

PatrowlManager through 1.8.4 Authorization Bypass via Events API

Published · Updated

Follow this CVE+ Monitor PatrowlManager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1epss 0.4%
PatrowlManager through 1.8.4 contains an authorization bypass vulnerability in the events and alerts API endpoints that lack ownership filtering. Authenticated attackers can read platform event history, delete arbitrary events, and modify alerts belonging to other users.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N
Affected products
Patrowl · PatrowlManager
Related CVEs — PatrowlManager

In the same product, most dangerous first.

CVE-2021-43829HIGHUnrestricted Upload of Files in PatrowlEPSS 59.2%CVE-2021-43828HIGHImproper Privilege Management in PatrowlEPSS 1.4%CVE-2026-92754MEDIUMPatrowlManager through 1.8.4 Improper Access Control via users APIEPSS 0.3%