CVE-2026-3322

CVSS 5.6 (medium) · published 2026-10-26

Due to improper permission checks in Lobster_pro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects Lobster_pro version 4.12.12-LTS and potentially other versions prior to 25.1.3.

Weakness: CWE-280

Source: NVD CVE-2026-3322

References

• https://www.schutzwerk.com/en/blog/schutzwerk-sa-2025-002/
• http://seclists.org/fulldisclosure/2026/Oct/35

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.