---
id: 9151
title: "[EN] CVE-2026-16764: Missing validation, full access"
cve: CVE-2026-16764
source_domain: yokai.hakaisecurity.io
source_url: "https://yokai.hakaisecurity.io/en-cve-2026-16764-missing-validation-full-access/"
published_at: "2026-09-25T20:03:20Z"
tags: ["vulnerability-research", "research"]
phying_url: "https://phying.com/item/9151"
lang: en
---

# [EN] CVE-2026-16764: Missing validation, full access

## Summary

OWASP DefectDojo is an open-source vulnerability management platform widely used by security teams to centralize, track, and prioritize findings from various scanning tools. Because it handles extremely sensitive data such as vulnerability reports, infrastructure configurations, and security metrics, the platform implements a Role-Based Access Control (RBAC) model. However,

## Intelligence Metadata

- **Sources:** yokai.hakaisecurity.io
- **CVE:** CVE-2026-16764
- **Published:** 2026-09-25T20:03:20Z
- **Original:** https://yokai.hakaisecurity.io/en-cve-2026-16764-missing-validation-full-access/
- **Phying News:** https://phying.com/item/9151