Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-27490

Combodo iTop: Weak secret generation for inline image

Description

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, inline images that are accessible without being authenticated are protected by a weak 24-bit pseudo-random secret. This issue has been fixed in version 3.2.3.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Combodo iTop

  • < 3.2.3affected

References