🔓 CVEs & KEV
CVE-2026-34948 — CVSS 7.7 — Combodo iTop: Access control bypass via OQL joinsCombodo iTop is a web based ...
CVE-2026-34949 — CVSS 6.5 — Combodo iTop: Unauthenticated user can delete .readonly fileCombodo iTop is a...
Back to Cyber Hose
Combodo iTop access control bypass via OQL joins (CVE-2026-34948)
A CVSS 7.7 access control bypass in Combodo iTop headlines this run, alongside an unauthenticated file deletion flaw in the same product.
Need help assessing your exposure?
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check