PT-2026-38423 · Unknown · Liderahenk

Mehmet Demi̇r · Published 2026-05-07 · Updated 2026-05-20 · CVE-2026-6508

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Liderahenk versions 2.0.1 through 2.0.1

Description An Origin Validation Error in the application allows attackers to bypass Access Control Lists (ACLs), which are sets of rules that define permissions for users or systems. This flaw enables unauthorized remote access to sensitive functionalities without requiring authentication by manipulating request origins to trick the application into recognizing them as legitimate.

Recommendations Update to version 2.0.2.

Fix

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2026-6508

Affected Products

Liderahenk

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-6508 · Security Note
• https://twitter.com/HugoValters/status/2057110003568312671 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1t6an4v/critical_vulnerability_in_liderahenk_allows · Reddit Post
• https://t.me/cveNotify/162507 · Telegram Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0181 · Note
• https://twitter.com/lyrie_ai/status/2054840811464835262 · Twitter Post
• https://twitter.com/CVEnew/status/2052400779164848617 · Twitter Post
• https://twitter.com/OrizonCyber/status/2052365395634290992 · Twitter Post