CVE-2026-123664

MEDIUM 5.4

nasa-gcn gcn.nasa.gov Email Notification email improper authorization

CVSS Score

5.4

EPSS Score

0.0%

EPSS Percentile

0th

A security flaw has been discovered in nasa-gcn gcn.nasa.gov up to b299b562af665878964b981a459f0a9c04b11adf. This issue affects some unknown processing of the file /user/email of the component Email Notification Handler. Performing a manipulation of the argument Recipient results in improper authorization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The pull request to fix this issue awaits acceptance.

CWE	CWE-285 CWE-266
Vendor	nasa-gcn
Product	gcn.nasa.gov
Published	Nov 6, 2026

Stay Ahead of the Next One

Get instant alerts for nasa-gcn gcn.nasa.gov

Be the first to know when new medium vulnerabilities affecting nasa-gcn gcn.nasa.gov are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

nasa-gcn / gcn.nasa.gov

b299b562af665878964b981a459f0a9c04b11adf

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/431788 vuldb.com: https://vuldb.com/vuln/431788/cti vuldb.com: https://vuldb.com/cve/CVE-2026-123664 vuldb.com: https://vuldb.com/submit/1033135 github.com: https://github.com/nasa-gcn/gcn.nasa.gov/issues/3805 https: https://https:/github.com/nasa-gcn/gcn.nasa.gov/pull/3863 github.com: https://github.com/nasa-gcn/gcn.nasa.gov/

Credits

🔍 NirvanaOn (VulDB User) VulDB CNA Team