What is CVE-2026-14862?

CVE-2026-14862 is a low-severity vulnerability in Support Genix, classified under Missing Authorization. CVSS score: 3.7/10. Published 2026-07-31.

How severe is CVE-2026-14862?

Low severity. CVSS v3 base score is 3.7 out of 10.

Auth bypass in Support Genix

CVE-2026-14862

The Support Genix WordPress plugin before 1.4.48 does not properly authorize access to support-ticket attachment downloads, allowing unauthenticated users who obtain the stored attachment file name to download other users' private ticket…

Vulnerability class: Broken Access Control

CVSS v3 metric

CVSS v3 base score 3.7 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Unknown Support Genix — versions 0

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

contact@wpscan.com (technical-description, exploit, vdb-entry)

Frequently asked questions

What is CVE-2026-14862?: CVE-2026-14862 is a low-severity vulnerability in Support Genix, classified under Missing Authorization. CVSS score: 3.7/10. Published 2026-07-31.
How severe is CVE-2026-14862?: Low severity. CVSS v3 base score is 3.7 out of 10.