CVE-2026-30866
Combodo iTop is a web based IT service management tool.
Published Aug 21, 2026 · updated Oct 14, 2026
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, unauthenticated users can access uploaded sensitive via sniffed url. This issue has been fixed in version 3.2.3.
Timeline
Detection, updates, and resolution for this record.
Aug 21, 2026 · NIST NVD
Detected
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, unauthenticated users can access uploaded sensitive via sniffed url. This issue has been fixed in version 3.2.3.
Oct 14, 2026 · NIST NVD
Updated
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, unauthenticated users can access uploaded sensitive via sniffed url. This issue has been fixed in version 3.2.3.
Sources
- CVE.orgCVE-2026-30866
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-30866
30-day exploitation probability 0.5%
first.org - NIST NVDCVE-2026-30866
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, unauthenticated users can access uploaded sensitive via sniffed url. This issue has been fixed in version 3.2.3.
nvd.nist.gov