CVE-2023-27107

8.8 highEPSS 0.8%

High (8.8) in myq-solution. EPSS 0.8% chance of exploitation in the next 30 days.

Incorrect access control in the runReport function of MyQ Solution Print Server before 8.2 Patch 32 and Central Server before 8.2 Patch 22 allows users who do not have appropriate access rights to generate internal reports using a direct URL.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-11-01)
CWE: CWE-863
Published: 2023-04-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

myq-solution:central_server
myq-solution:print_server

References

https://gist.github.com/smidtbx10/f8ff1c4977b7f54886c6a52e9ef4e816
https://gist.github.com/smidtbx10/f8ff1c4977b7f54886c6a52e9ef4e816

Check your stack JSON