CVE-2026-16309: Netiket Information Technologies Edoweb

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects EdoWEB: before 780-g7.

Affected products

• Netiket Information Technologies Edoweb: before 780-g7 (fixed in 780-g7)

Published 2026-08-18. Last modified 2026-08-26.