CVE-2026-7502 | LinkStackOrg LinkStack up to 4.8.6 Management Endpoint UserController.php saveLink authorization (ID 975)

A vulnerability was found in LinkStackOrg LinkStack up to 4.8.6. It has been rated as critical. The affected element is the function saveLink of the file app/Http/Controllers/UserController.php of the component Management Endpoint. The manipulation leads to authorization bypass.

This vulnerability is documented as CVE-2026-7502. The attack can be initiated remotely. Additionally, an exploit exists.

The pull request to fix this issue awaits acceptance.