Is CVE-2026-105272 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-105272?

CVE-2026-105272 has a CVSS v3 severity of MEDIUM (4.2).

Back

CVE-2026-105272

Description

GROWI contains an authorization bypass vulnerability in its page viewing and commenting functionality due to improper use of a user-controlled key. By exploiting this vulnerability, an authenticated attacker may obtain the contents and comments of pages without the required read permission.