CVE-2020-26506

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-11-05 · updated 2026-06-17
Weakness: CWE-670

Description

An Authorization Bypass vulnerability in the Marmind web application with version 4.1.141.0 allows users with lower privileges to gain control to files uploaded by administrative users. The accessed files were not visible by the low privileged users in the web GUI.

Affected products

Marmind: 4.1.141.0

References

https://www.marmind.com/en/
https://www2.deloitte.com/de/de/pages/risk/articles/marmind-authorization-bypass.html
https://www.marmind.com/en/
https://www2.deloitte.com/de/de/pages/risk/articles/marmind-authorization-bypass.html

Get alerted when CVE-2020-26506 or the next vulnerability affects your stack