CVE-2026-5383

An issue that could allow access to Explorer groups from outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L (4.4 Medium). This issue was fixed in version 4.0.260208.0 of the runZero Explorer.

• CWE-863

• https://help.runzero.com/docs/release-notes/#402602080Release Notes
• https://www.runzero.com/advisories/runzero-explorer-cve-2026-5383/Vendor Advisory

Published

Apr 7, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-53824OpenClaw before 2026.4.24 contains a token revocation vulner…6.5
• CVE-2026-53825OpenClaw before 2026.4.7 contains an arbitrary file read vul…7.1
• CVE-2026-53826OpenClaw before 2026.4.26 contains an information disclosure…4.3
• CVE-2026-53827OpenClaw before 2026.5.2 contains a credential exposure vuln…6.5
• CVE-2026-53828OpenClaw before 2026.5.6 contains an authorization bypass vu…8.8
• CVE-2026-53829OpenClaw before 2026.5.18 contains an approval display trunc…8.5
• CVE-2026-53830OpenClaw before 2026.4.22 contains a webhook secret revocati…6.5
• CVE-2026-53831OpenClaw before 2026.5.18 contains a policy enforcement vuln…8.1
• CVE-2026-53832OpenClaw before 2026.5.18 contains an identity header valida…7.1
• CVE-2026-53833OpenClaw before 2026.4.29 contains an authorization bypass v…6.5
• CVE-2026-53834OpenClaw before 2026.4.27 contains an authorization bypass v…6.5
• CVE-2026-53835OpenClaw before 2026.5.6 contains a configuration enforcemen…4.3