CVE-2026-19358

MEDIUM 6.3

3CORESec Trapdoor DefaultFunction access control

CVSS Score

6.3

EPSS Score

0.0%

EPSS Percentile

0th

A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected by this vulnerability is the function DefaultFunction. This manipulation causes improper access controls. The attack can be initiated remotely. The vendor was contacted early about this disclosure.

CWE	CWE-284 CWE-266
Vendor	3coresec
Product	trapdoor
Published	Aug 9, 2026

Stay Ahead of the Next One

Get instant alerts for 3coresec trapdoor

Be the first to know when new medium vulnerabilities affecting 3coresec trapdoor are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

3CORESec / Trapdoor

1.2.0 1.2.1 1.2.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/387212 vuldb.com: https://vuldb.com/vuln/387212/cti vuldb.com: https://vuldb.com/cve/CVE-2026-19358 vuldb.com: https://vuldb.com/submit/866021

Credits

🔍 changli (VulDB User) VulDB CNA Team