Qorela DC (1.6.1-RC29 to < 1.6.2) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/qorela-dc-1.6.1-rc29-to--1.6.2/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 29 Sep 2026 12:27:11 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgMissing Authorization Vulnerability in Interprobe Qorela DChttps://feed.craftedsignal.io/briefs/2026-09-qorela-dc-auth-bypass/Tue, 29 Sep 2026 12:27:11 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-09-qorela-dc-auth-bypass/A missing authorization vulnerability (CVE-2026-87748) in Interprobe Qorela DC allows authenticated users to escalate privileges and perform unauthorized actions.Interprobe Information Technologies Inc. has disclosed a missing authorization vulnerability, identified as CVE-2026-87748, affecting the Qorela DC platform. The vulnerability exists within versions 1.6.1-RC29 through versions prior to 1.6.2. This flaw allows an authenticated user to bypass existing authorization controls, facilitating unauthorized privilege escalation and system manipulation. As a result, attackers who have established low-privilege access to the Qorela DC interface can leverage this vulnerability to gain broader administrative or functional control, potentially leading to unauthorized system configuration changes or data access. Organizations utilizing Qorela DC are urged to update to version 1.6.2 or later to remediate the vulnerability.

Impact

Successful exploitation of this vulnerability permits authenticated users to perform unauthorized actions beyond their intended scope. This privilege abuse can lead to total loss of integrity and confidentiality within the Qorela DC management interface, depending on the sensitive operations accessible through the bypassed authorization checks.

Recommendation

  • Upgrade all instances of Qorela DC to version 1.6.2 or later to address the authorization flaw documented in CVE-2026-87748.
  • Review access logs for Qorela DC to identify unusual administrative actions or privilege changes originating from low-privileged service or user accounts.
  • Restrict access to the Qorela DC management interface to trusted networks and implement robust authentication controls to minimize the exposure of the application to potentially compromised accounts.
]]>highadvisory