CyberSecBulletin

Vearch vulnerabilities

We track 1 vulnerability in Vearch products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 11, 2026.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Vearch vulnerabilities

  • 8.8 High severity

    vearch: Incorrect Authorization

    CVE-2026-108746Vearch

    Vearch 3.5.2 through 3.5.9 contains an incorrect authorization vulnerability in Role.HasPermissionForResources that ignores stored ReadOnly or None privilege levels for resources listed in a role. Authenticated non-root users can upsert and delete documents wi