Is CVE-2026-115624 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-115624?

CVE-2026-115624 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-115624

Description

GROWI contains a missing authorization check vulnerability in its collaborative editing feature. By exploiting this vulnerability, a user with read-only permission, including a guest user, or a user in pending, suspended, or invited status may modify page drafts.