CVE-2026-10218
MEDIUM5.4CVSS v3
5.5CVSS v2
0.05%
EPSS (exploit probability)
CWE-266CWE
Description
A vulnerability has been found in nextlevelbuilder GoClaw up to 3.11.3. This affects the function auth of the file internal/http/evolution_handlers.go. Such manipulation leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The project tagged the reported issue as bug.
CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Affected routers (0)
No routers currently mapped to this CVE in our database.