CVE-2026-92753 — PatrowlManager through 1.8.4 Authorization Bypass via Events API
PatrowlManager through 1.8.4 contains an authorization bypass vulnerability in the events and alerts API endpoints that lack ownership filtering. Authenticated attackers can rea…
Published: 2026-09-16 · CVSS: 7.1 · CVSS 4.0
PatrowlManager through 1.8.4 contains an authorization bypass vulnerability in the events and alerts API endpoints that lack ownership filtering. Authenticated attackers can read platform event history, delete arbitrary events, and modify alerts belonging to other users.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7