← Database

CVE-2026-30866

HIGH CVSS: 7.5 Published: 2026-08-21 Modified: 2026-08-25

Description

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, unauthenticated users can access uploaded sensitive via sniffed url. This issue has been fixed in version 3.2.3.

Affected Platforms

Unknown

Weakness Type

CWE-200, CWE-306

References