SB2026052743 - Improper authorization in Sparx Enterprise Architect

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026052743

SB2026052743 - Improper authorization in Sparx Enterprise Architect

Published: May 27, 2026

Security Bulletin ID SB2026052743
CSH Severity
Low
Patch available
NO
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Improper Authorization (CVE-ID: CVE-2026-42098)

CWE-ID: CWE-285 - Improper Authorization

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a remote user to perform unauthorized actions on the model.

The vulnerability exists due to improper access control in the Enterprise Architect client security enforcement when processing authenticated model operations. A remote user can modify the client behavior to log in as another user or administrator to perform unauthorized actions on the model.

The issue also applies to cloud models in configurations that do not require server HTTP authentication or when using the login as different user option.


Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References