CVE-2026-55624

5.3 mediumEPSS 0.4%

Medium (5.3). EPSS 0.4% chance of exploitation in the next 30 days.

MintyItanium Lost-Auction is an auction plugin for Minecraft. Prior to commit 88c920b05042929db334ba06d57f052b42d6b3f8, players can take items like barrier blocks or duplicate items from the GUI. Commit 88c920b05042929db334ba06d57f052b42d6b3f8 fixes the issue.

Severity

CVSS 4.0

5.3 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWE: CWE-670
Published: 2026-08-25
Modified: 2026-09-09
Record from: the NVD, synced 2026-10-19

References

https://codeberg.org/MintyItanium/Lost-Auction
https://codeberg.org/MintyItanium/Lost-Auction/commit/88c920b05042929db334ba06d57f052b42d6b3f8

Check your stack JSON