CVE-2026-65708

HIGH 8.1

sysPass 3.2.11 Insecure Direct Object Reference via AccountFileController

CVSS Score

8.1

EPSS Score

0.0%

EPSS Percentile

0th

sysPass through version 3.2.11 contains an insecure direct object reference vulnerability that allows any authenticated attacker to access account file attachments belonging to accounts they do not have ACL permissions for by exploiting missing authorization checks in AccountFileController. Attackers can supply arbitrary numeric file IDs through the download, view, delete, upload, and list actions to enumerate and manipulate any attachment in the vault, bypassing account-level access controls entirely.

CWE	CWE-639
Vendor	nuxsmin
Product	syspass
Published	Jul 24, 2026
Last Updated	Jul 24, 2026

Stay Ahead of the Next One

Get instant alerts for nuxsmin syspass

Be the first to know when new high vulnerabilities affecting nuxsmin syspass are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Affected Versions

nuxsmin / sysPass

0 ≤ 3.2.11

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/Caycon/cve-advisories/blob/main/2026/sysPass/CVE-2026-65708.md vulncheck.com: https://www.vulncheck.com/advisories/syspass-insecure-direct-object-reference-via-accountfilecontroller

Credits

ByteMe.Red