CVE-2026-31936

EUVD-2026-64170
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, users can access to unauthorized object information through the search operation. This issue has been fixed in version 3.2.3.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
GitHub_MCNA
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
combodoitop
𝑥
< 3.2.3
CNA
Common Weakness Enumeration
References
https://github.com/Combodo/iTop/commit/b3223eb9b6bc1514276f8f321db1e27db6f42808
https://github.com/Combodo/iTop/security/advisories/GHSA-3r3r-j29m-3v43