CVE-2026-27384
CRITICAL 9.0EPSS 0.3%
Improper Validation of Specified Quantity in Input vulnerability in BoldGrid W3 Total Cache w3-total-cache allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects W3 Total Cache: from n/a through <= 2.9.1.
- CVSS v3.1
- 9.0 CRITICAL
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - CVSS v3.1
- 9.0 CRITICAL
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - EPSS
- 0.30% chance of exploitation in the next 30 days, 23th percentile
- Published
- 2026-03-05
- Updated
- 2026-04-29
Proof-of-concept exploits (1)
- xxconi/CVE-2026-273840★ · 2026-05-26