PT-2026-4466 · Syed Balkhi · Sugar Calendar

Daroo · Published 2026-01-23 · Updated 2026-01-24 · CVE-2026-24636

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Syed Balkhi Sugar Calendar (Lite) versions through 3.10.1

Description An issue exists in Syed Balkhi Sugar Calendar (Lite) related to incorrectly configured access control security levels, potentially allowing unauthorized access.

Recommendations Update Syed Balkhi Sugar Calendar (Lite) to a version later than 3.10.1.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-24636

Affected Products

Sugar Calendar

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-24636 · Security Note
• https://twitter.com/CVEnew/status/2015086226286469163 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2014722301242061206 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/sugar-calendar-lite/vulnerability/wordpress-sugar-calendar-lite-plugin-3-10-1-broken-access-control-vulnerability?_s_id=cve · Note
• https://t.me/CVEtracker/42849 · Telegram Post