HarborGuard / CVE
Back to search
HIGHCVE-2026-30994Published Modified CNA mitre

CVE-2026-30994: Incorrect access control in the config

Incorrect access control in the config.php component of Slah v1.5.0 and below allows unauthenticated attackers to access sensitive information, including active session credentials.

Metrics

CVSS v3.1
7.5
Severity
HIGH
Fixed in
—
Affected Products
1
Affected packages
  • n/a / n/a
    n/a
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
CVE-2026-30994: Incorrect access control in the config | HarborGuard CVE