CVE-2026-39756: Wappointment Team Wappointment

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Unauthenticated Insecure Direct Object References (IDOR) in Wappointment <= 2.7.7 versions.

Affected products

• Wappointment Team Wappointment: up to and including 2.7.7

Published 2026-10-06. Last modified 2026-10-06.