CVE-2026-91338
The source describes an easily exploitable access-control vulnerability in iSupport. A low-privileged attacker with network access via HTTP may obtain unauthorized creation, deletion, or modification access to critical data or all iSupport-accessible data, as well as unauthorized read access to a subset of that data.
CERT24