What is GHSA-fcfg-fr25-xwpr?

GHSA-fcfg-fr25-xwpr is a security advisory published by GitHub Security Advisories with Medium severity. Authorization bypass through User-Controlled key vulnerability in Universe Software Computer...

Which CVE IDs does GHSA-fcfg-fr25-xwpr cover?

GHSA-fcfg-fr25-xwpr covers the following CVE IDs: CVE-2026-2406. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-fcfg-fr25-xwpr?

GHSA-fcfg-fr25-xwpr has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-fcfg-fr25-xwprMediumCVSS 6.5

Authorization bypass through User-Controlled key vulnerability in Universe Software Computer...

Vendor

GitHub Security Advisories

Published

July 22, 2026

Last Modified

July 22, 2026

🔗 CVE IDs covered (1)

CVE-2026-2406 →

📋 Description

Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client.

This issue affects Online Registration and Workflow Management System: through 12022026.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-2406
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0594
https://github.com/advisories/GHSA-fcfg-fr25-xwpr