Bender Customer&Partner Platform Vulnerability - Privilege Escalation
view advisory published 2026-10-13
Bender is publishing this advisory to inform customers about a security vulnerability in the Customer&Partner platform. The issue allows any account to view the roles of other users. Bender has analyzed the weakness and determined that user information and user credentials are not affected. Bender considers the weakness to be of medium risk which should be patched.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-94410US | medium4.3OT elevated | — | ||
A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no part… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- No fix availableCustomer&Partner 5.0.0<5.17.5
Bender service updated to version 5.17.5 or later. The fix is planned in Q4 2026.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan