Findings

CVE-2026-3999

A broken access control may allow an authenticated user to perform a horizontal privilege escalation.

Published Mar 13, 2026 · updated Jun 17, 2026 · pointsharp id server

A broken access control may allow an authenticated user to perform a horizontal privilege escalation. The vulnerability only impacts specific configurations.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 13, 2026 · NIST NVD

    Detected

    A broken access control may allow an authenticated user to perform a horizontal privilege escalation. The vulnerability only impacts specific configurations.

  2. Jun 17, 2026 · NIST NVD

    Updated

    A broken access control may allow an authenticated user to perform a horizontal privilege escalation. The vulnerability only impacts specific configurations.

Affected

  • cpe pointsharp/id serverversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-3999

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-3999

    A broken access control may allow an authenticated user to perform a horizontal privilege escalation. The vulnerability only impacts specific configurations.

    nvd.nist.gov

References