Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-92753

PatrowlManager through 1.8.4 Authorization Bypass via Events API

CVSS 4.0 7.1 HIGHCVSS 3.1 7.1 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-92753

Published

PatrowlManager through 1.8.4 contains an authorization bypass vulnerability in the events and alerts API endpoints that lack ownership filtering. Authenticated attackers can read platform event history, delete arbitrary events, and modify alerts belonging to other users.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-92753

Published

PatrowlManager

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Patrowl",
                    "product": "PatrowlManager",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "0",
                            "lessThanOrEqual": "1.8.4",
                            "status": "affected",
                            "versionType": "semver"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON