CVE & CISA-KEV Catalog

CVE-2026-14753

HIGH
7.3
CVSS v3
NVD

Description

A vulnerability was detected in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. This impacts an unknown function of the file /PHP/objects/notes of the component Note Handler/Assignment Handler. Performing a manipulation of the argument assignment_item_id results in authorization bypass. The attack can be initiated remotely. The exploit is now public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

How to fix

No published remediation has been found for this vulnerability's affected products yet.

Mitigation guidance may be in the linked vendor advisories in the References section below.

CVSS v3 Vector

Exploitability

Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityLow
IntegrityLow
AvailabilityLow

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploit Intelligence

EPSS data unavailable for this CVE.

References

Related Vulnerabilities

Other CWE-285 vulnerabilities, ordered by exploit likelihood. View all

CVESeverityCVSSEPSSExploitedFix
CVE-2025-29927Critical9.1100%-Fix
CVE-2021-28799Critical10.078%KEV + RansomFix
CVE-2023-32707High8.874%-Fix
CVE-2023-48241High7.573%-Fix
CVE-2023-22480High7.367%-Fix
CVE-2022-3229Critical9.866%--
Embed a live status badge for CVE-2026-14753
CVE-2026-14753 severity badge

Markdown

[![CVE-2026-14753](https://tridentstack.com/cve/badge/CVE-2026-14753.svg)](https://tridentstack.com/cve/CVE-2026-14753)

HTML

<a href="https://tridentstack.com/cve/CVE-2026-14753"><img src="https://tridentstack.com/cve/badge/CVE-2026-14753.svg" alt="CVE-2026-14753"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-07-05.