CVE-2026-113702
iomad PDF Certificate lib.php local_iomad_pluginfile authorization
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
A security flaw has been discovered in iomad up to 4.5.15/5.0.11/5.1.8/5.2.4. Affected by this vulnerability is the function local_iomad_pluginfile in the library public/local/iomad/lib.php of the component PDF Certificate Handler. The manipulation results in authorization bypass. The attack can be launched remotely. The patch is identified as ac7427130865ce0ed80870813317c87ae3060fa4/7bf0b10199782e04aa579e9d516e473b164afd1c/db903abdcb3aba124cce670608ae6d7ba5f51a84/66f7417c5357b7575e39e8be390602156c1a1225. It is advisable to implement a patch to correct this issue. This CVE was requested by the vendor.
| CWE | CWE-639 CWE-285 |
| Vendor | n/a |
| Product | iomad |
| Published | Nov 9, 2026 |
| Last Updated | Nov 9, 2026 |
Stay Ahead of the Next One
Get instant alerts for n/a iomad
Be the first to know when new medium vulnerabilities affecting n/a iomad are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
n/a / iomad
4.5.0 4.5.1 4.5.2 4.5.3 4.5.4 4.5.5 4.5.6 4.5.7 4.5.8 4.5.9 4.5.10 4.5.11 4.5.12 4.5.13 4.5.14 4.5.15 5.0.0 5.0.1 5.0.2 5.0.3 5.0.4 5.0.5 5.0.6 5.0.7 5.0.8 5.0.9 5.0.10 5.0.11 5.1.0 5.1.1 5.1.2 5.1.3 5.1.4 5.1.5 5.1.6 5.1.7 5.1.8 5.2.0 5.2.1 5.2.2 5.2.3 5.2.4
References
vuldb.com: https://vuldb.com/vuln/433093 vuldb.com: https://vuldb.com/vuln/433093/cti vuldb.com: https://vuldb.com/cve/CVE-2026-113702 github.com: https://github.com/iomad/iomad/issues/2817 github.com: https://github.com/iomad/iomad/commit/66f7417c5357b7575e39e8be390602156c1a1225 github.com: https://github.com/iomad/iomad/
Credits
Peter de Haas (Augmentic) VulDB GitHub Commit Analyzer VulDB CNA Team