CVE-2026-16214

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-16214

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-16214.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-16214

Published

2026-07-19T04:15:09.590Z

Modified

2026-07-24T03:57:07.425403364Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

geex-arts django-jet Dashboard views.py authorization

Details

A vulnerability was identified in geex-arts django-jet up to 1.0.8. This affects an unknown function of the file jet/dashboard/views.py of the component Dashboard Module. Such manipulation leads to authorization bypass. The attack can be executed remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "cwe_ids": [
        "CWE-285",
        "CWE-639"
    ],
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/16xxx/CVE-2026-16214.json"
}

References

Affected packages

Git / github.com/geex-arts/django-jet

Affected ranges

Type

GIT

Repo

https://github.com/geex-arts/django-jet

Events

Introduced

bf922900abfce7eb2ebebe02daf3fc4a083b07dc

Last affected

465b994c2922e6f8cc057cac045782a801044c92

Database specific

{
    "extracted_events": [
        {
            "introduced": "1.0.0"
        },
        {
            "last_affected": "1.0.0"
        },
        {
            "introduced": "1.0.1"
        },
        {
            "last_affected": "1.0.1"
        },
        {
            "introduced": "1.0.2"
        },
        {
            "last_affected": "1.0.2"
        },
        {
            "introduced": "1.0.3"
        },
        {
            "last_affected": "1.0.3"
        },
        {
            "introduced": "1.0.4"
        },
        {
            "last_affected": "1.0.4"
        },
        {
            "introduced": "1.0.5"
        },
        {
            "last_affected": "1.0.5"
        },
        {
            "introduced": "1.0.6"
        },
        {
            "last_affected": "1.0.6"
        },
        {
            "introduced": "1.0.7"
        },
        {
            "last_affected": "1.0.7"
        },
        {
            "introduced": "1.0.8"
        },
        {
            "last_affected": "1.0.8"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

1.*

1.0.0

1.0.1

1.0.2

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-16214.json"