← All advisories

Unrated severityNVD Advisory· Published Nov 5, 2026· Updated Nov 5, 2026

CVE-2026-105461

CVE-2026-105461

Description

Missing check for ORDERMGR_UPDATE in ordermgr allows user with only ORDERMGR_VIEW permission to update orders.

Affected versions before : 24.09.08

Users are recommended to upgrade to version 24.09.08 which fixes this issue.

Affected products

1

Apache/ordermgrllm-fuzzy
Range: <24.09.08

Patches

Vulnerability mechanics

References

1

lists.apache.org/thread.html/7b2syzksp7klt9fvhdg0olldvs2g83lznvd

News mentions

0

No linked articles in our index yet.