Is CVE-2026-110621 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-110621?

CVE-2026-110621 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-110621

Description

Swetrix Cloud before 5.1.0 contains a missing authorization vulnerability in ProjectController.addProject that allows authenticated users to hijack arbitrary projects by moving them into their own organisation. Attackers can create an organisation and add a victim project by its public tracking ID to read analytics, change settings, or delete it.