PT-2026-28047 · Latepoint · Latepoint

Published 2026-03-25 · Updated 2026-03-25 · CVE-2026-32533

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions LatePoint versions through 5.2.6

Description An authorization bypass exists in LatePoint due to incorrectly configured access control security levels. This allows exploitation through a user-controlled key.

Recommendations Update LatePoint to a version later than 5.2.6.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2026-32533

Affected Products

Latepoint

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-32533 · Security Note
• https://twitter.com/CVEnew/status/2036911869336969350 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/latepoint/vulnerability/wordpress-latepoint-plugin-5-2-6-insecure-direct-object-references-idor-vulnerability?_s_id=cve · Note
• https://twitter.com/infoflowcloud/status/2036912450310668647 · Twitter Post