CVE-2026-3999

Broken access control vulnerability affecting ID Server PUBLISHED

Description (CNA)

A broken access control may allow an authenticated user to perform a horizontal privilege escalation. The vulnerability only impacts specific configurations.

Affected (CNA)

Vendor / product	Versions
Pointsharp / ID Server	affected 0 before 9.0.0

CWE

CWE-639

References

https://docs.pointsharp.com/psa/advisories/psa-2026-001.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.