Auth bypass in Aveva Pipeline Simulation 2025

CVE-2026-5387

The vulnerability, if exploited, could allow an unauthenticated miscreant to perform operations intended only for Simulator Instructor or Simulator Developer (Administrator) roles, resulting in privilege escalation with potential for modif…

Vulnerability class: Broken Access Control

EPSS: 0.001 (18.7th percentile) — read the EPSS interpretation.