CVE-2026-27384
Improper Validation of Specified Quantity in Input vulnerability in BoldGrid W3 Total Cache w3-total-cache allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects W3 Total Cache: from n/a through <= 2.9.1.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
- EPSS probability
- 0.30%
- CWE
- CWE-1284
- Published
- 2026-03-05
- Last modified
- 2026-04-29
Affected products
- BoldGrid W3 Total Cache
- BoldGrid W3 Total Cache
Weakness type
Related vulnerabilities
- CVE-2026-87735 — An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an...
- CVE-2026-87470 — Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a...
- CVE-2026-16025 — Improper Payment Validation in PayTR's PayTR Virtual Pos iFrame API (v9x) WHMCS Module
- CVE-2026-85201 — In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a...
- CVE-2026-82750 — Unbounded EIP-7702 authorization list in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors account delegation
- CVE-2026-82751 — Unbounded key authorization in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors access-key provisioning
- CVE-2026-82752 — Ash string length constraints count graphemes, so a combining-mark string of any size passes max_length
- CVE-2026-53720 — pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small