{"id":"CVE-2026-87748","revision":"9cdc7a7fb94d45ef8f7a5e411bcb22cf","records":[{"revision":"9cdc7a7fb94d45ef8f7a5e411bcb22cf","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-87748","aliases":[],"title":"Privilege Escalation via Account Takeover in Interprobe's Qorela DC","description":"Missing Authorization vulnerability in Interprobe Information Technologies Inc. Qorela DC allows Privilege Abuse.\n\nThis issue affects Qorela DC: from 1.6.1-RC29 before v1.6.2.","state":0,"publishedAt":"2026-09-29T11:51:55.245+00:00","modifiedAt":"2026-09-29T14:58:53.605+00:00","affected":[{"ecosystem":"Vendor product","name":"Qorela DC","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Interprobe Information Technologies Inc.\",\n                    \"product\": \"Qorela DC\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"1.6.1-RC29\",\n                            \"lessThan\": \"v1.6.2\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":8.8,"severity":"HIGH"}],"references":["https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1209"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-87748","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-87748","identifiers":["CVE-2026-87748"]},"retained":false,"historicalAffected":[]}],"coverage":[]}