CVE-2026-3999
Broken access control vulnerability affecting ID Server
A broken access control may allow an authenticated user to perform a horizontal privilege escalation. The vulnerability only impacts specific configurations.
CVSS 4.0 · 8.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products