1. Home
  2. CVE Database
  3. CVE-2026-6355
MEDIUM · 6.5

CVE-2026-6355

A vulnerability in the web application allows unauthorized users to access and manipulate sensitive data across different tenants by exploiting insecure direct object references. This could lead to un...

Vulnerability Description

A vulnerability in the web application allows unauthorized users to access and manipulate sensitive data across different tenants by exploiting insecure direct object references. This could lead to unauthorized access to sensitive information and unauthorized changes to the tenant's configuration.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
AugmenttAugmentt< 2025-10-02

Related Weaknesses (CWE)

CWE-639

References

FAQ

What is CVE-2026-6355?

CVE-2026-6355 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A vulnerability in the web application allows unauthorized users to access and manipulate sensitive data across different tenants by exploiting insecure direct object references. This could lead to un...

How severe is CVE-2026-6355?

CVE-2026-6355 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-6355?

Check the references section above for vendor advisories and patch information. Affected products include: Augmentt Augmentt.