{"id":"CVE-2026-18722","state":"PUBLISHED","title":"diaowen DWSurvey dev-survey.do in DwDeisgnSurveyController.devSurvey. authorization","description":"A vulnerability was found in diaowen DWSurvey up to 6.14.0. Impacted is the function in DwDeisgnSurveyController.devSurvey. of the file /api/dwsurvey/app/v6/dw-design-survey/dev-survey.do of the component Survey Handler. The manipulation results in authorization bypass. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.","publishedAt":"2026-08-04T03:00:08.926Z","updatedAt":"2026-08-04T14:20:14.881Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["diaowen DWSurvey"],"affected":[{"vendor":"diaowen","product":"DWSurvey","versions":[{"version":"6.0","status":"affected"},{"version":"6.1","status":"affected"},{"version":"6.2","status":"affected"},{"version":"6.3","status":"affected"},{"version":"6.4","status":"affected"},{"version":"6.5","status":"affected"},{"version":"6.6","status":"affected"},{"version":"6.7","status":"affected"},{"version":"6.8","status":"affected"},{"version":"6.9","status":"affected"},{"version":"6.10","status":"affected"},{"version":"6.11","status":"affected"},{"version":"6.12","status":"affected"},{"version":"6.13","status":"affected"},{"version":"6.14.0","status":"affected"}],"cpes":["cpe:2.3:a:diaowen:dwsurvey:*:*:*:*:*:*:*:*"],"modules":["Survey Handler"]}],"references":["https://vuldb.com/vuln/385633","https://vuldb.com/vuln/385633/cti","https://vuldb.com/cve/CVE-2026-18722","https://vuldb.com/submit/856183","https://drive.google.com/file/d/1S4_tO4YGk4schmB7AIZa3dq3wGxgfN8T/view?usp=sharing"],"weaknesses":["CWE-639","CWE-285"],"ingestedAt":"2026-10-29T20:11:10.572Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/18xxx/CVE-2026-18722.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-18722","state":"PUBLISHED","datePublished":"2026-08-04T03:00:08.926Z","dateUpdated":"2026-08-04T14:20:14.881Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-08-03T17:50:34.988Z"},"containers":{"cna":{"title":"diaowen DWSurvey dev-survey.do in DwDeisgnSurveyController.devSurvey. authorization","descriptions":[{"lang":"en","value":"A vulnerability was found in diaowen DWSurvey up to 6.14.0. Impacted is the function in DwDeisgnSurveyController.devSurvey. of the file /api/dwsurvey/app/v6/dw-design-survey/dev-survey.do of the component Survey Handler. The manipulation results in authorization bypass. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."}],"affected":[{"vendor":"diaowen","product":"DWSurvey","versions":[{"version":"6.0","status":"affected"},{"version":"6.1","status":"affected"},{"version":"6.2","status":"affected"},{"version":"6.3","status":"affected"},{"version":"6.4","status":"affected"},{"version":"6.5","status":"affected"},{"version":"6.6","status":"affected"},{"version":"6.7","status":"affected"},{"version":"6.8","status":"affected"},{"version":"6.9","status":"affected"},{"version":"6.10","status":"affected"},{"version":"6.11","status":"affected"},{"version":"6.12","status":"affected"},{"version":"6.13","status":"affected"},{"version":"6.14.0","status":"affected"}],"cpes":["cpe:2.3:a:diaowen:dwsurvey:*:*:*:*:*:*:*:*"],"modules":["Survey Handler"]}],"references":[{"url":"https://vuldb.com/vuln/385633","name":"VDB-385633 | diaowen DWSurvey dev-survey.do in DwDeisgnSurveyController.devSurvey. authorization","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/385633/cti","name":"VDB-385633 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-18722","name":"CVE-2026-18722 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/856183","name":"Submit #856183 | diaowen DWSurvey v6.14.0 Improper Access Controls","tags":["third-party-advisory"]},{"url":"https://drive.google.com/file/d/1S4_tO4YGk4schmB7AIZa3dq3wGxgfN8T/view?usp=sharing","tags":["exploit"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":6.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":6.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-639","type":"CWE","lang":"en","description":"Authorization Bypass"}]},{"descriptions":[{"cweId":"CWE-285","type":"CWE","lang":"en","description":"Improper Authorization"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-08-04T03:00:08.926Z"},"timeline":[{"time":"2026-08-03T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-08-03T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-08-03T19:55:45.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Stephen Lin (VulDB User)","type":"reporter"},{"lang":"en","value":"VulDB CNA Team","type":"coordinator"}],"x_generator":["VulDB PVTS v202608"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-08-04T14:20:05.691504Z","id":"CVE-2026-18722","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-08-04T14:20:14.881Z"}}]}}}