by Kastro
Paper/Archive/CVE-2026-22234

CVE-2026-22234

OPEXUS eCase Portal — OPEXUS eCasePortal unauthenticated IDOR

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
36
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 35.1.351 × 207.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

OPEXUS eCasePortal before version 9.0.45.0 allows an unauthenticated attacker to navigate to the 'Attachments.aspx' endpoint, iterate through predictable values of 'formid', and download or delete all user-uploaded files, or upload new files.

Affected

ProductAffectedFixed inSource
eCase Portal< 9.0.45.09.0.45.0CNA

Scores by source

cisa-cg (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cisa-cg (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcve.org/CVERecord?id=CVE-2026-22234writeupraw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-008-02.json