CVE-2026-4263

Incorrect authorization in HiJiffy Chatbot PUBLISHED

Description (CNA)

Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'visitor' in '/api/v1/webchat/message'.

Affected (CNA)

Vendor / product	Versions
HiJiffy / HiJiffy Chatbot	affected all versions

CWE

CWE-863

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-hijiffy-chatbot

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.