CVE-2026-86810
High
Description
A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely. Upgrading to version 1.10.0 is sufficient to resolve this issue. The patch is named 6fc91c49eebdb8bfdfeed71cb50a5d97eac70f24. It is advisable to upgrade the affected component.
SeverityHigh
CVSS7.3
Exploit probability—
ProductOpen-web-analytics
PublishedSep 8, 2026
First seenSep 8, 2026
Weakness typeCWE-287Improper authentication
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| open-web-analytics open-web-analytics | 1.9.0, 1.9.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.