Skip to content
OpenAdvisories
High · 8.8 CVE-2026-3999 EUVD-2026-11772GHSA-2p4q-qchf-h9q6

Broken access control vulnerability affecting ID Server

Published Mar 13, 2026 · Updated Mar 16, 2026 · Assigned by ENISA

Description

A broken access control may allow an authenticated user to perform a
horizontal privilege escalation. The vulnerability only impacts specific
configurations.

Affected products

VendorProductAffectedFixed
Pointsharp ID Server < 9.0.0 9.0.0

References