CVE-2026-7399

HIGH

IDOR in MeWare Software's PDKS

Title source: cna
STIX 2.1

Description

Authorization bypass through User-Controlled key vulnerability in MeWare Software Development Inc. PDKS allows Privilege Abuse. This issue affects PDKS: from V16.20200313 before VMYR_3.5.2025117.

References (1)

Scores

CVSS v3 8.1
EPSS 0.0001
EPSS Percentile 1.8%
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-639
Status published
Products (1)
MeWare Software Development Inc./PDKS V16.20200313 - VMYR_3.5.2025117
Published Apr 30, 2026
Tracked Since Apr 30, 2026