VULNERABILITY INTELLIGENCE

CVE-2026-27396

CVSS score7.3 HIGH

EPSS probability0.25%

CISA KEVNot currently listed

Published2026-03-05

Last modified2026-06-17

Description

Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directory Pro: from n/a through <= 2.5.6.