What is CVE-2026-27355?
CVE-2026-27355 is an unauthenticated Broken Access Control vulnerability in Ditty plugin versions <= 3.1.66. This flaw could allow an unauthenticated attacker to gain unauthorized access to resources. Users are advised to immediately update the Ditty plugin to the latest version.
Azərbaycanca: CVE-2026-27355, Ditty plagininin 3.1.66 və daha əvvəlki versiyalarında autentifikasiya olunmamış `Broken Access Control` zəifliyidir. Bu boşluq autentifikasiya olunmamış hücumçuya resurslara icazəsiz giriş imkanı yarada bilər. İstifadəçilərə Ditty plaginini dərhal son versiyaya yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-284
FAQ2
Which plugin and versions are affected by CVE-2026-27355?
The vulnerability affects the Ditty plugin versions 3.1.66 and earlier.
What can happen if CVE-2026-27355 is exploited?
An unauthenticated attacker could gain unauthorized access to resources.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.