CVE-2026-42098
Sparx Enterprise Architect software has a security feature that limits user's actions to those specified in the role. An authenticated attacker can modify the Enterprise Architect client behavior (e.g. using a debugger) and log in as any other user or administrator - then it is possible to do every possible change to the repository. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 17.1 and below were tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.7
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS probability
- 0.40%
- CWE
- CWE-603
- Published
- 2026-05-19
- Last modified
- 2026-05-19
Affected products
- Sparx Systems Enterprise Architect
Weakness type
Related vulnerabilities
- CVE-2026-66305 — Skype for Business Spoofing Vulnerability
- CVE-2026-76945 — Ebyte NE2-D11 Use of Client-Side Authentication
- CVE-2026-71187 — Ebyte NA111-M Use of Client-Side Authentication
- CVE-2026-8830 — Keycloak: org.keycloak/keycloak-services: keycloak: policy bypass during webauthn credential registration via client-side javascript manipulation
- CVE-2026-40551 — Use of Client-Side Authentication in mpGabinet
- CVE-2025-30042 — Session generation possible with certificate number only
- CVE-2026-1363 — JNC｜IAQS and I6 - Client-Side Enforcement of Server-Side Security
- CVE-2025-64119 — Nuvation Energy BMS Client-side Authentication