PT-2026-39461 · Dotouch · Xproupf

Linziyu + 1 · Published 2026-05-10 · Updated 2026-05-10 · CVE-2026-8233

NVD

CVSS v2.0

4.0

Medium

Base vector

AV:A/AC:H/Au:S/C:P/I:P/A:P

A vulnerability was determined in Dotouch XproUPF 2.0.0-release-088aa7c4. Affected is an unknown function of the component UPF. This manipulation causes improper access controls. A high degree of complexity is needed for the attack. The exploitability is told to be difficult. The vendor was contacted early about this disclosure.

Fix

Incorrect Privilege Assignment

Improper Access Control

Weakness Enumeration

CWE-266

CWE-284

Related Identifiers

CVE-2026-8233

Affected Products

Xproupf

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-8233 · Security Note
• https://vuldb.com/submit/808799 · Note
• https://vuldb.com/vuln/362450 · Note
• https://vuldb.com/vuln/362450/cti · Note