CVE-2026-27490
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Aug 21, 2026
Vendor
unknown
Description
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, inline images that are accessible without being authenticated are protected by a weak 24-bit pseudo-random secret. This issue has been fixed in version 3.2.3.