CVE-2026-18749 | CERT/CC VINCE up to 3.0.43 Attachment Authorization t_attach.case _is_my_case authorization

A vulnerability marked as problematic has been reported in CERT/CC VINCE up to 3.0.43. Impacted is the function _is_my_case of the file t_attach.case of the component Attachment Authorization. Performing a manipulation of the argument case results in authorization bypass.

This vulnerability is known as CVE-2026-18749. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.