[EN] CVE-2026-16764: Missing validation, full access

CVE

CVE-2026-16764

Published

2026-09-25 20:03

Collected

2026-10-17 01:31

---
id: 9151
title: "[EN] CVE-2026-16764: Missing validation, full access"
cve: CVE-2026-16764
source_domain: yokai.hakaisecurity.io
source_url: "https://yokai.hakaisecurity.io/en-cve-2026-16764-missing-validation-full-access/"
published_at: "2026-09-25T20:03:20Z"
tags: ["vulnerability-research", "research"]
phying_url: "https://phying.com/item/9151"
lang: en
---

# [EN] CVE-2026-16764: Missing validation, full access

## Summary

OWASP DefectDojo is an open-source vulnerability management platform widely used by security teams to centralize, track, and prioritize findings from various scanning tools. Because it handles extremely sensitive data such as vulnerability reports, infrastructure configurations, and security metrics, the platform implements a Role-Based Access Control (RBAC) model. However,

## Intelligence Metadata

- **Sources:** yokai.hakaisecurity.io
- **CVE:** CVE-2026-16764
- **Published:** 2026-09-25T20:03:20Z
- **Original:** https://yokai.hakaisecurity.io/en-cve-2026-16764-missing-validation-full-access/
- **Phying News:** https://phying.com/item/9151