Report: CVE-2026-7510 - OWAP DefectDojo Benchmark/Engagement/Product/Survey authorization

Report: CVE-2026-7510 - OWAP DefectDojo Benchmark/Engagement/Product/Survey authorization

CVE ID :CVE-2026-7510 Published : April 30, 2026, 11:16 p.m. | 2 hours, 7 minutes ago Description :A vulnerability was determined in OWAP DefectDojo up to 2.55.4. Affected by this vulnerability is an unknown functionality of the component Benchmark/Engagement/Product/Survey. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.56.0 addresses this issue. This patch is called eb6120a379185d37eb1af17b69bb5614a830ab1f. Upgrading the affected component is recommended. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
April 30, 2026