CVE-2026-9808

FAUCET Score

An authorization bypass vulnerability exists in the Mautic 7 API v2 endpoints (utilizing API Platform). Under certain conditions, roles configured with owner-scope restrictions (such as `viewown` or `editown`) are not properly enforced. This allows low-privilege authenticated API users to bypass ownership-logic controls and access or modify resources belonging to other users.

First published: May 29, 2026Last modified: May 29, 2026

Impacted Technologies

Vendor	Product	Version(s)	CPE
Https://Packagist.Org	Mautic/Core	>= 7.0.0, < 7.1.2CNA affecteddefault unaffected

CVSS Data

CVSS version used by this source: 3.1

7.1HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

Exploitability Score

2.8

Impact Score

4.2

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.20%

Probability of exploitation in next 30 days

EPSS Percentile

10.2%

Percentile rank of EPSS score among Peer Group

As of 2026-07-25

Model: v2026.06.15

This CVE's current EPSS score of 0.0020 is in the 1st percentile among its peer group of 17,822 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

composerpatch availablevia ghsa

Product: mautic/coreFixed in: 7.1.2

Vendor Advisories (1)

composerGHSA-2jrw-c95w-h43ghigh

Mautic has an Authorization Bypass in API v2 Endpoints

Jul 2, 2026

References

github.com / mautic/mautic/security/advisories/GHSA-2jrw-c95w-h43g