CVE-2026-86808

    Dashboard / Vulnerabilities / CVE-2026-86808

    CVE-2026-86808

    Published: 8 Sept 2026Last Modified: 13 Sept 2026

    Summary: moltis-org moltis vault.rs vault_recovery_handler missing authentication

    Details: A security vulnerability has been detected in moltis-org moltis up to 20260818.10. The affected element is the function vault_unlock_handler/vault_recovery_handler of the file vault.rs. Such manipulation leads to missing authentication. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 20260819.01 is sufficient to fix this issue. The name of the patch is 3b92dd64d5648f829968cf48bf67dc3113852fef. Upgrading the affected component is advised.

    References: https://github.com/moltis-org/moltis/, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/86xxx/CVE-2026-86808.json, https://nvd.nist.gov/vuln/detail/CVE-2026-86808, https://vuldb.com/cve/CVE-2026-86808, https://vuldb.com/submit/911081, https://vuldb.com/vuln/399813, https://github.com/moltis-org/moltis/issues/1177, https://vuldb.com/vuln/399813/cti, https://github.com/moltis-org/moltis/commit/3b92dd64d5648f829968cf48bf67dc3113852fef, https://github.com/moltis-org/moltis/pull/1216, https://github.com/moltis-org/moltis/releases/tag/20260819.01

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 9925a4acd930d1adcbcaf08b0671392f5d306c80
    Fixed -3b92dd64d5648f829968cf48bf67dc3113852fef

    Affected versions

    20260818.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-86808 | CVE-DB