CVE-2026-4263

UNKNOWN 0.0

Incorrect authorization in HiJiffy Chatbot

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

13th

Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'visitor' in '/api/v1/webchat/message'.

CWE	CWE-863
Vendor	hijiffy
Product	hijiffy chatbot
Published	Mar 26, 2026
Last Updated	Mar 26, 2026

Stay Ahead of the Next One

Get instant alerts for hijiffy hijiffy chatbot

Be the first to know when new unknown vulnerabilities affecting hijiffy hijiffy chatbot are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

HiJiffy / HiJiffy Chatbot

all versions

References

NVD ↗ CVE.org ↗ EPSS Data ↗

incibe.es: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-hijiffy-chatbot

Credits

David Utón Amaya (m3n0sd0n4ld)