CVE-2026-50881

8.1 highEPSS 0.2%

High (8.1). EPSS 0.2% chance of exploitation in the next 30 days.

Incorrect access control in the impworks Bonsai v6.0 allows authenticated attackers with Editor privileges to escalate privileges to Administrator and execute unauthorized account, password, and configuration changes.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-11-01)
CWE: CWE-284
Published: 2026-06-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://gist.github.com/pyuysig/68754e4c40161ea27fcf80be46c59e7c
https://gist.github.com/pyuysig/68754e4c40161ea27fcf80be46c59e7c

Check your stack JSON