CVE-2026-51367

An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the api_vedo/chat endpoint and the utente_chat parameter

CVSS 3.1

7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-26)

CWE

CWE-639

Published

2026-08-19

Modified

2026-10-27

Record from

the NVD, synced 2026-10-27

References

• https://blog.elmec.com/cve-2026-51367-insecure-direct-object-reference-idor-leading-to-unauthorized-data-access
• https://www.bottinelliinformatica.it/it/vedo-suite/
• https://www.cybergon.com/

Check your stackJSON