Get real-time updates on Telegram
P5
CVE-2026-73155: cti-transmute 0 through 1.4.0
CVE-2026-73155. EPSS 0.00351 (percentile 0.27479), scored 22-Oct-2026.
Affected technology
cti-transmute · 0 through 1.4.0
MISP
Description’s affected range: versions of cti-transmute
Component: Not specified by the source
Attack conditions (Source advisory, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
Authenticated users can add or remove emoji reactions on comments without first checking whether those users are authorized to view the target comment. Source advisory’s CVSS 4.0 assessment (base score 5.3/10) rates confidentiality and availability impact as none; integrity impact as low.
- CWE
- CWE-862
- CCR priority
- 0.1 /100 (P5)
- EPSS
- 0.00351 · percentile 0.27479 · 2026-10-22
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-24 01:40:49.068977+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-73155.html