CVE-2026-22230 — OPEXUS eCASE Audit incorrect access control
OPEXUS eCASE Audit allows an authenticated attacker to modify client-side JavaScript or craft HTTP requests to access functions or buttons that have been disabled or blocked by …
Published: 2026-01-08 · CVSS: 7.2 · CVSS 4.0
OPEXUS eCASE Audit allows an authenticated attacker to modify client-side JavaScript or craft HTTP requests to access functions or buttons that have been disabled or blocked by an administrator. Fixed in eCASE Platform 11.14.1.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7