{"id":"CVE-2026-3322","aliases":[],"title":"Privilege escalation via request replaying in Lobster_pro","titleSource":"SCHUTZWERK","descriptionSource":"SCHUTZWERK","products":[{"vendor":"Lobster DATA GmbH","name":"Lobster_pro","platforms":[],"versions":[{"version":"4.12.12-LTS","status":"affected"},{"version":"25.1.3","status":"unaffected"}],"defaultStatus":"unknown","source":"SCHUTZWERK","url":"https://www.cve.org/CVERecord?id=CVE-2026-3322"}],"remediation":[{"text":"Update Lobster_pro to version 25.1.3 or later.","source":"SCHUTZWERK","url":"https://www.cve.org/CVERecord?id=CVE-2026-3322"}],"description":"Due to improper permission checks in Lobster_pro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects Lobster_pro version 4.12.12-LTS and potentially other versions prior to 25.1.3.","severity":"medium","score":5.6,"published":"2026-10-26T14:41:12.655Z","modified":"2026-10-27T08:11:20.312Z","withdrawn":false,"knownExploited":false,"affected":[],"references":["https://www.schutzwerk.com/en/blog/schutzwerk-sa-2025-002/"],"sources":[{"name":"CVE","id":"CVE-2026-3322","modified":"2026-10-27T08:11:20.312Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-3322"}],"assessments":[{"source":"SCHUTZWERK","vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:A","score":5.6}],"sourceAffected":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T17:45:30.911Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}