Is CVE-2026-53620 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-53620?

CVE-2026-53620 has a CVSS v3 severity of MEDIUM (6.3).

Back

CVE-2026-53620

Description

GROWI contains a vulnerability with an authorization bypass through user-controlled key in the bookmark folder APIs. If this vulnerability is exploited, an authenticated attacker could retrieve, tamper with, and/or delete the other user's bookmark data.