CVE-2026-23550

Severity

CRITICAL

CVSS

10.0

EPSS

0.20631

Risk score

47.22

CISA KEV

PoC

Published

2026-01-14

Modified

2026-04-28

First seen

2026-08-07

Aliases

EUVD-2026-2436, GHSA-7HJG-42GH-8J3V

Products

Modular DS:Modular DS 0 ≤2.5.1

Sources

euvd EUVD-2026-2436

Description

Incorrect Privilege Assignment vulnerability in Modular DS Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from n/a through <= 2.5.1.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-2436
https://patchstack.com/database/Wordpress/Plugin/modular-connector/vulnerability/wordpress-modular-ds-monitor-update-and-backup-multiple-websites-plugin-2-5-1-privilege-escalation-vulnerability?_s_id=cve