CVE-2026-17562— IDOR in Zirve Security's AdisyonPro
Quick assessment
Affected
Summit Security Systems AdisyonPro
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Summit Security Systems 的 AdisyonPro 中存在通过用户可控密钥实现的授权绕过漏洞，导致未能被访问控制列表（ACL）适当约束的功能可被访问。 该问题影响 AdisyonPro：v5.21.0 之前的版本。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-17562
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IDOR in Zirve Security's AdisyonPro
Source: CVE Program / CVE List V5
Vulnerability Description
Authorization bypass through User-Controlled key vulnerability in Summit Security Systems AdisyonPro allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects AdisyonPro: before v5.21.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
通过用户控制密钥绕过授权机制
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Summit Security Systems | AdisyonPro | 0 ~ v5.21.0 | - |
|
II. Public POCs for CVE-2026-17562
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-17562
请登录查看更多情报信息。
Other References for CVE-2026-17562 (1)
-
🔗 T.C. Siber Güvenlik Başkanlığı - Güvenlik Bildirimleri Detay government-resource
IV. Related Vulnerabilities
Same weakness: CWE-639
-
CVE-2026-81817
Flowintel Missing Task-to-Case Authorization Allows Cross-Ca -
CVE-2026-81668
Rubygem-katello: cross-tenant content view filter rule acces -
CVE-2026-81658
Foreman: cross-tenant disclosure of template revisions via u -
CVE-2026-81576
Improper Authentication of Session Handles -
CVE-2026-77990
Joomla Extension - joomlaeventmanager.net - Attendee lists r
V. Comments for CVE-2026-17562
No comments yet