CVE-2026-35023 | Cloud Solutions SAS Wimi Teamwork up to 8.1.x Image Preview preview.php item_id authorization

A vulnerability classified as problematic was found in Cloud Solutions SAS Wimi Teamwork up to 8.1.x. The affected element is an unknown function of the file preview.php of the component Image Preview Handler. Executing a manipulation of the argument item_id can lead to authorization bypass.

This vulnerability is registered as CVE-2026-35023. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.