What is CVE-2026-19358?

CVE-2026-19358 is a medium-severity vulnerability in 3coresec Trapdoor, classified under Incorrect Privilege Assignment. CVSS score: 6.3/10. Published 2026-08-09.

How severe is CVE-2026-19358?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Privilege escalation in 3coresec Trapdoor

CVE-2026-19358

A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected by this vulnerability is the function DefaultFunction. This manipulation causes improper access controls. The attack can be initiated remotely. The vendor was contac…

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

3coresec Trapdoor — versions 1.2.0, 1.2.1, 1.2.2

Weakness classification (CWE)

CWE-266 — Incorrect Privilege Assignment
CWE-284 — Improper Access Control

References

cna@vuldb.com (technical-description, vdb-entry)
cna@vuldb.com (signature, permissions-required)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-19358?: CVE-2026-19358 is a medium-severity vulnerability in 3coresec Trapdoor, classified under Incorrect Privilege Assignment. CVSS score: 6.3/10. Published 2026-08-09.
How severe is CVE-2026-19358?: Medium severity. CVSS v3 base score is 6.3 out of 10.