Intel

CVE-2026-49047

Sicherheitslücke durch fehlende Autorisierung in DearHive DearFlip ermöglicht die Ausnutzung falsch konfigurierter Zugriffskontroll-Siche…

mediumEPSS 0.3%

Description

Missing Authorization vulnerability in DearHive DearFlip allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects DearFlip: from n/a through 2.4.27.

Source: cvelistv5CVE.org (MITRE)ENISA EUVDNVD (NIST)

Metrics

XIEM Effective CVSS
4.3
Source: nvd-v3
EPSS percentile
17.7 %
Elevated — this CVE ranks above at least 10% of all CVEs scored today.
KEV status
—
Show all metrics
Severity
medium
Priority score
42.99
Exploit maturity
no public PoC known
CVSS v3
4.3
EPSS score
0.3 %
Low — model estimates < 1% exploitation likelihood.
Published
2026-05-27 14:51 UTC
CWE
CWE-862

Weakness classes (CWE)

  • CWE-862Class

    Missing Authorization

    The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

    cwe.mitre.org →

References & sources