P5 Verified
Missing Authorization Check in Vaadin Spreadsheet Allows Cell Comments to Be Written to Protected Sheets and Locked Cells
CVE-2026-93547. EPSS 0.00363 (percentile 0.27816), scored 2026-10-03. Fixed version: 41da1428d6c458919f7effaeca8b8317d2d1bc74. Fixed version: 7e3951a1ef87880b6994dc69966c5969dd730c8a. Fixed version: b2210855d02d7e09d2e4c2b27bfe4f3f0ce99ae3. Fixed version: 47cf689e61827dc711be69dba6a9d8d04b74a375. Fixed version: 8c5c6348444a0b10a0d6e00f9a7490a8a3b63d18.
- CVE / CWE
- CVE-2026-93547 /
- Vendor / product
- Unavailable / Unavailable
- Severity
- 0.1
- CVSS
- Unavailable · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N · osv
- EPSS
- 0.00363 · percentile 0.27816 · 2026-10-03
- KEV
- no · added unavailable · due unavailable · ransomware use unavailable
- Exploit signals
- Signal evidence
Affected products
- Product unavailable · Fixed version: 41da1428d6c458919f7effaeca8b8317d2d1bc74
- Product unavailable · Fixed version: 7e3951a1ef87880b6994dc69966c5969dd730c8a
- Product unavailable · Fixed version: b2210855d02d7e09d2e4c2b27bfe4f3f0ce99ae3
- Product unavailable · Fixed version: 47cf689e61827dc711be69dba6a9d8d04b74a375
- Product unavailable · Fixed version: 8c5c6348444a0b10a0d6e00f9a7490a8a3b63d18
Provenance
- OSV.dev · Source record · observed 2026-10-04 07:06:47.357040+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-93547.html