CVE-2026-14165 — Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through…

CVE-2026-14165

Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 PUBLISHED

Description (CNA)

An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to access data of other users without authorization.

Affected (CNA)

Vendor / product	Versions
Dassault Systèmes / Tuleap Enterprise Edition	affected 17.0-1 through 17.0-31; affected 17.5-1 through 17.5-17

CWE

CWE-639

References

https://www.3ds.com/trust-center/security/security-advisories/cve-2026-14165

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.