CVE-2026-23496

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-23496", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-01-13T15:47:41.629Z", "datePublished": "2026-01-15T16:58:39.431Z", "dateUpdated": "2026-01-15T18:26:33.948Z"}, "containers": {"cna": {"title": "Pimcore Web2Print Tools Bundle \"Favourite Output Channel Configuration\" Missing Function Level Authorization", "problemTypes": [{"descriptions": [{"cweId": "CWE-284", "lang": "en", "description": "CWE-284: Improper Access Control", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/pimcore/pimcore/security/advisories/GHSA-4wg4-p27p-5q2r", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/pimcore/pimcore/security/advisories/GHSA-4wg4-p27p-5q2r"}, {"name": "https://github.com/pimcore/web2print-tools/pull/108", "tags": ["x_refsource_MISC"], "url": "https://github.com/pimcore/web2print-tools/pull/108"}, {"name": "https://github.com/pimcore/web2print-tools/commit/7714452a04b9f9b077752784af4b8d0b05e464a1", "tags": ["x_refsource_MISC"], "url": "https://github.com/pimcore/web2print-tools/commit/7714452a04b9f9b077752784af4b8d0b05e464a1"}, {"name": "https://github.com/pimcore/web2print-tools/releases/tag/v5.2.2", "tags": ["x_refsource_MISC"], "url": "https://github.com/pimcore/web2print-tools/releases/tag/v5.2.2"}, {"name": "https://github.com/pimcore/web2print-tools/releases/tag/v6.1.1", "tags": ["x_refsource_MISC"], "url": "https://github.com/pimcore/web2print-tools/releases/tag/v6.1.1"}], "affected": [{"vendor": "pimcore", "product": "pimcore", "versions": [{"version": ">= 6.0.0-RC1, < 6.1.1", "status": "affected"}, {"version": "< 5.2.2", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-01-15T18:13:52.619Z"}, "descriptions": [{"lang": "en", "value": "Pimcore Web2Print Tools Bundle adds tools for web-to-print use cases to Pimcore. Prior to 5.2.2 and 6.1.1, the application fails to enforce proper server-side authorization checks on the API endpoint responsible for managing \"Favourite Output Channel Configurations.\" Testing revealed that an authenticated backend user without explicitely lacking permissions for this feature was still able to successfully invoke the endpoint and modify or retrieve these configurations. This vulnerability is fixed in 5.2.2 and 6.1.1."}], "source": {"advisory": "GHSA-4wg4-p27p-5q2r", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/pimcore/pimcore/security/advisories/GHSA-4wg4-p27p-5q2r", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-15T18:05:26.888302Z", "id": "CVE-2026-23496", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-15T18:26:33.948Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-23496", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-15T18:05:26.888302Z"}}}], "references": [{"url": "https://github.com/pimcore/pimcore/security/advisories/GHSA-4wg4-p27p-5q2r", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-15T18:03:59.526Z"}}], "cna": {"title": "Pimcore Web2Print Tools Bundle \"Favourite Output Channel Configuration\" Missing Function Level Authorization", "source": {"advisory": "GHSA-4wg4-p27p-5q2r", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "pimcore", "product": "pimcore", "versions": [{"status": "affected", "version": ">= 6.0.0-RC1, < 6.1.1"}, {"status": "affected", "version": "< 5.2.2"}]}], "references": [{"url": "https://github.com/pimcore/pimcore/security/advisories/GHSA-4wg4-p27p-5q2r", "name": "https://github.com/pimcore/pimcore/security/advisories/GHSA-4wg4-p27p-5q2r", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/pimcore/web2print-tools/pull/108", "name": "https://github.com/pimcore/web2print-tools/pull/108", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/pimcore/web2print-tools/commit/7714452a04b9f9b077752784af4b8d0b05e464a1", "name": "https://github.com/pimcore/web2print-tools/commit/7714452a04b9f9b077752784af4b8d0b05e464a1", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/pimcore/web2print-tools/releases/tag/v5.2.2", "name": "https://github.com/pimcore/web2print-tools/releases/tag/v5.2.2", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/pimcore/web2print-tools/releases/tag/v6.1.1", "name": "https://github.com/pimcore/web2print-tools/releases/tag/v6.1.1", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Pimcore Web2Print Tools Bundle adds tools for web-to-print use cases to Pimcore. Prior to 5.2.2 and 6.1.1, the application fails to enforce proper server-side authorization checks on the API endpoint responsible for managing \"Favourite Output Channel Configurations.\" Testing revealed that an authenticated backend user without explicitely lacking permissions for this feature was still able to successfully invoke the endpoint and modify or retrieve these configurations. This vulnerability is fixed in 5.2.2 and 6.1.1."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-284", "description": "CWE-284: Improper Access Control"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-01-15T18:13:52.619Z"}}}, "cveMetadata": {"cveId": "CVE-2026-23496", "state": "PUBLISHED", "dateUpdated": "2026-01-15T18:26:33.948Z", "dateReserved": "2026-01-13T15:47:41.629Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-01-15T16:58:39.431Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "pimcore", "vendor": "pimcore", "versions": [{"status": "affected", "version": ">= 6.0.0-RC1, < 6.1.1"}, {"status": "affected", "version": "< 5.2.2"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:pimcore:web2print_tools:*:*:*:*:*:pimcore:*:*", "matchCriteriaId": "34D6DA7C-7CAF-4A15-BFA8-53753D4F7432", "versionEndExcluding": "5.2.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:pimcore:web2print_tools:*:*:*:*:*:pimcore:*:*", "matchCriteriaId": "0E66DF65-5F40-48E0-A6FD-8D7B793ECC3B", "versionEndExcluding": "6.1.1", "versionStartIncluding": "6.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Pimcore Web2Print Tools Bundle adds tools for web-to-print use cases to Pimcore. Prior to 5.2.2 and 6.1.1, the application fails to enforce proper server-side authorization checks on the API endpoint responsible for managing \"Favourite Output Channel Configurations.\" Testing revealed that an authenticated backend user without explicitely lacking permissions for this feature was still able to successfully invoke the endpoint and modify or retrieve these configurations. This vulnerability is fixed in 5.2.2 and 6.1.1."}, {"lang": "es", "value": "El Pimcore Web2Print Tools Bundle a\u00f1ade herramientas para casos de uso web-to-print a Pimcore. Antes de las versiones 5.2.2 y 6.1.1, la aplicaci\u00f3n no logra aplicar comprobaciones de autorizaci\u00f3n adecuadas del lado del servidor en el endpoint de la API responsable de gestionar las 'Favourite Output Channel Configurations'. Las pruebas revelaron que un usuario de backend autenticado sin carecer expl\u00edcitamente de permisos para esta caracter\u00edstica a\u00fan pod\u00eda invocar exitosamente el endpoint y modificar o recuperar estas configuraciones. Esta vulnerabilidad est\u00e1 corregida en las versiones 5.2.2 y 6.1.1."}], "id": "CVE-2026-23496", "lastModified": "2026-06-17T10:21:41.597", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.5, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-23496", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-01-15T18:05:26.888302Z", "version": "2.0.3"}}]}, "published": "2026-01-15T17:16:08.747", "references": [{"source": "security-advisories@github.com", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/pimcore/pimcore/security/advisories/GHSA-4wg4-p27p-5q2r"}, {"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/pimcore/web2print-tools/commit/7714452a04b9f9b077752784af4b8d0b05e464a1"}, {"source": "security-advisories@github.com", "tags": ["Exploit", "Issue Tracking"], "url": "https://github.com/pimcore/web2print-tools/pull/108"}, {"source": "security-advisories@github.com", "tags": ["Release Notes"], "url": "https://github.com/pimcore/web2print-tools/releases/tag/v5.2.2"}, {"source": "security-advisories@github.com", "tags": ["Release Notes"], "url": "https://github.com/pimcore/web2print-tools/releases/tag/v6.1.1"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/pimcore/pimcore/security/advisories/GHSA-4wg4-p27p-5q2r"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}], "source": "security-advisories@github.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-863"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T06:04:18.617052+00:00", "value": {"mitigation_remediation": ["Update the Web2Print Tools package to at least version 5.2.2 or 6.1.1, which includes the missing authorization checks.", "After the update, review backend user permissions and remove or restrict the ability to edit \u201cFavourite Output Channel Configurations\u201d for users that do not require this capability.", "Enable logging and auditing on the configuration API to detect any unauthorized changes and to provide evidence for incident response."], "summary": {"action": "Patch Now", "impact": "Authorization Bypass"}, "threat_synthesis": {"affected_systems": "Pimcore Web2Print Tools Bundle, versions prior to 5.2.2 and 6.1.1. Users of the Pimcore platform with the Web2Print Tools package deployed in these versions are affected.", "description_and_impact": "An authenticated backend user can access the API endpoint that manages \"Favourite Output Channel Configurations\" without proper server\u2011side checks, allowing the user to modify or retrieve these configurations. This lack of function\u2011level authorization permits unauthorized configuration changes, potentially altering print output behavior or compromising data integrity.", "risk_and_exploitability": "The CVSS score of 5.4 indicates a moderate severity, while the EPSS of less than 1% suggests a low exploitation probability at this time. The vulnerability is not listed in CISA\u2019s KEV catalog, so there is no evidence of active exploitation. The likely attack vector involves an authenticated backend user, so the threat is limited to individuals who have legitimate platform access. If such a user accepts the exploit, they can alter printing configuration settings without permission, thereby gaining unauthorized control over print\u2011related outputs."}}}}, "created": "2026-01-16T13:43:28.527400+00:00", "updated": "2026-04-18T06:15:15.863323+00:00", "vendors": ["pimcore", "pimcore$PRODUCT$pimcore"]}