CVE-2026-7505

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5. This affects an unknown function of the component RPC Handler. This manipulation causes improper authorization. The attack may be initiated remotely. The exploit has been published and may be used. Upgrading to version 3.9.0 mitigates this issue. Patch name: 406022e79f4a18b3070a446712080571eff11e30. You should upgrade the affected component.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-266 CWE-285

Affected software

No affected versions have been published.

Timeline

Published: Apr 30, 2026
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-750506.5In JetBrains YouTrack before 2026.1.13901, 2026.2.17950 doS attack was possible via crafted type parameters CVE-2026-750518.1In JetBrains YouTrack before 2026.2.17917 unauthorised project transfer between organisations was possible CVE-2026-750524.4In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects CVE-2026-750535.4In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint CVE-2026-750546.3In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects CVE-2026-750555.5In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE CVE-2026-750567.8In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible CVE-2026-750576.2In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log CVE-2026-750585.5In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers CVE-2026-750594.4In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible CVE-2026-75067.3A vulnerability has been found in SourceCodester Hotel Management System 1.0. This impacts an unknown function of the file /index.php/reserv CVE-2026-750608.4In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools