Critical (9.8) in microfocus operation bridge reporter. EPSS 16% chance of exploitation in the next 30 days.
An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow remote attackers to access the OBR host as a non-admin user
Severity
CVSS 3.1
9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
16% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)