CVE-2026-92753: PatrowlManager through 1.8.4 Authorization Bypass via Events API

Severity: high (CVSS 7.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-16 · updated 2026-09-23
Weakness: CWE-862

Description

PatrowlManager through 1.8.4 contains an authorization bypass vulnerability in the events and alerts API endpoints that lack ownership filtering. Authenticated attackers can read platform event history, delete arbitrary events, and modify alerts belonging to other users.

Affected products

PatrowlManager: through 1.8.4

References

https://github.com/Patrowl/PatrowlManager
https://github.com/Patrowl/PatrowlManager/blob/1.8.4/events/apis.py#L15-L60
https://github.com/Patrowl/PatrowlManager/issues/474
https://www.vulncheck.com/advisories/patrowlmanager-through-1.8.4-authorization-bypass-via-events-api
https://github.com/Patrowl/PatrowlManager/issues/474

Get alerted when CVE-2026-92753 or the next vulnerability affects your stack