CVE-2026-3020: Wakyma Application Web

High severity, CVSS 8.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Identity based authorization bypass vulnerability (IDOR) that allows an attacker to modify the data of a legitimate user account, such as changing the victim's email address, validating the new email address, and requesting a new password. This could allow them to take complete control of other users' legitimate accounts

Affected products

• Wakyma Wakyma Application Web: any version

Published 2026-03-16. Last modified 2026-06-17.