Vulnerability Description
Identity based authorization bypass vulnerability (IDOR) that allows an attacker to modify the data of a legitimate user account, such as changing the victim's email address, validating the new email address, and requesting a new password. This could allow them to take complete control of other users' legitimate accounts
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-3020?
CVE-2026-3020 is a documented vulnerability. Identity based authorization bypass vulnerability (IDOR) that allows an attacker to modify the data of a legitimate user account, such as changing the victim's email address, validating the new email ...
How severe is CVE-2026-3020?
CVSS scoring is not yet available for CVE-2026-3020. Check NVD for updates.
Is there a patch for CVE-2026-3020?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.