{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-27954", "tracking": { "current_release_date": "2026-03-23T03:06:38.889760Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-27954", "initial_release_date": "2026-02-26T02:25:19.582688Z", "revision_history": [ { "date": "2026-02-26T02:25:19.582688Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (1).| CWES updated (1)." }, { "date": "2026-02-26T02:25:24.737945Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-02-26T02:38:55.745784Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| References created (1).| CWES updated (1)." }, { "date": "2026-02-26T02:39:03.180918Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-02-26T07:35:48.333933Z", "number": "5", "summary": "NCSC Score updated." }, { "date": "2026-02-26T14:13:20.978929Z", "number": "6", "summary": "Source created.| CVE status created. (valid)| EPSS created." }, { "date": "2026-02-26T14:13:24.705147Z", "number": "7", "summary": "NCSC Score updated." }, { "date": "2026-02-26T21:13:52.744317Z", "number": "8", "summary": "Unknown change." }, { "date": "2026-02-28T01:25:45.331408Z", "number": "9", "summary": "CVSS created.| Products created (1).| Product Identifiers created (1)." }, { "date": "2026-02-28T01:25:47.576688Z", "number": "10", "summary": "NCSC Score updated." }, { "date": "2026-02-28T08:19:53.991641Z", "number": "11", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (256).| References created (3).| CWES updated (1)." }, { "date": "2026-02-28T08:20:06.502422Z", "number": "12", "summary": "NCSC Score updated." }, { "date": "2026-03-20T09:39:20.903089Z", "number": "13", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-03-20T09:39:23.319335Z", "number": "14", "summary": "NCSC Score updated." } ], "status": "interim", "version": "14" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<=4.52", "product": { "name": "vers:unknown/<=4.52", "product_id": "CSAFPID-5736893", "product_identification_helper": { "cpe": "cpe:2.3:a:livehelperchat:live_helper_chat:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "Live Helper Chat" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/1.60", "product": { "name": "vers:unknown/1.60", "product_id": "CSAFPID-3392537" } }, { "category": "product_version_range", "name": "vers:unknown/1.74", "product": { "name": "vers:unknown/1.74", "product_id": "CSAFPID-3392538", "product_identification_helper": { "purl": "pkg:composer/remdex/livehelperchat@1.74" } } }, { "category": "product_version_range", "name": "vers:unknown/1.81", "product": { "name": "vers:unknown/1.81", "product_id": "CSAFPID-3392539", "product_identification_helper": { "purl": "pkg:composer/remdex/livehelperchat@1.81" } } }, { "category": "product_version_range", "name": "vers:unknown/1.82", "product": { "name": "vers:unknown/1.82", "product_id": "CSAFPID-3392540", "product_identification_helper": { "purl": "pkg:composer/remdex/livehelperchat@1.82" } } }, { "category": "product_version_range", "name": "vers:unknown/1.83", "product": { "name": "vers:unknown/1.83", "product_id": "CSAFPID-3392541", "product_identification_helper": { "purl": "pkg:composer/remdex/livehelperchat@1.83" } } }, { "category": "product_version_range", "name": "vers:unknown/1.84", "product": { "name": "vers:unknown/1.84", "product_id": "CSAFPID-3392542", "product_identification_helper": { "purl": "pkg:composer/remdex/livehelperchat@1.84" } } }, { "category": "product_version_range", "name": "vers:unknown/1.85", "product": { "name": "vers:unknown/1.85", "product_id": "CSAFPID-3392543", "product_identification_helper": { "purl": "pkg:composer/remdex/livehelperchat@1.85" } } }, { "category": "product_version_range", "name": "vers:unknown/1.86", "product": { "name": "vers:unknown/1.86", "product_id": "CSAFPID-3392544", "product_identification_helper": { "purl": "pkg:composer/remdex/livehelperchat@1.86" } } }, { "category": "product_version_range", "name": "vers:unknown/1.87", "product": { "name": "vers:unknown/1.87", "product_id": "CSAFPID-3392545", "product_identification_helper": { "purl": "pkg:composer/remdex/livehelperchat@1.87" } } }, { "category": "product_version_range", "name": "vers:unknown/1.88", "product": { "name": "vers:unknown/1.88", "product_id": "CSAFPID-3392546", "product_identification_helper": { "purl": "pkg:composer/remdex/livehelperchat@1.88" } } }, { "category": "product_version_range", "name": "vers:unknown/1.89", "product": { "name": "vers:unknown/1.89", "product_id": "CSAFPID-3392547", "product_identification_helper": { "purl": "pkg:composer/remdex/livehelperchat@1.89" } } }, { "category": "product_version_range", "name": "vers:unknown/1.90", "product": { "name": "vers:unknown/1.90", "product_id": "CSAFPID-3392548", "product_identification_helper": { "purl": "pkg:composer/remdex/livehelperchat@1.90" } } }, { "category": "product_version_range", "name": "vers:unknown/1.91", "product": { "name": "vers:unknown/1.91", "product_id": "CSAFPID-3392549", "product_identification_helper": { "purl": "pkg:composer/remdex/livehelperchat@1.91" } } }, { "category": "product_version_range", "name": "vers:unknown/1.93", "product": { "name": "vers:unknown/1.93", "product_id": "CSAFPID-3392550", "product_identification_helper": { "purl": "pkg:composer/remdex/livehelperchat@1.93" } } }, { "category": "product_version_range", "name": "vers:unknown/1.94", "product": { "name": "vers:unknown/1.94", "product_id": "CSAFPID-3392551", "product_identification_helper": { "purl": "pkg:composer/remdex/livehelperchat@1.94" } } }, { "category": "product_version_range", "name": "vers:unknown/1.95", "product": { "name": "vers:unknown/1.95", "product_id": "CSAFPID-3392552", "product_identification_helper": { "purl": "pkg:composer/remdex/livehelperchat@1.95" } } }, { "category": "product_version_range", "name": "vers:unknown/1.98", "product": { "name": "vers:unknown/1.98", "product_id": "CSAFPID-3392553", "product_identification_helper": { "purl": "pkg:composer/remdex/livehelperchat@1.98" } } }, { "category": "product_version_range", "name": "vers:unknown/2.0", "product": { "name": "vers:unknown/2.0", "product_id": "CSAFPID-3392554", "product_identification_helper": { "purl": "pkg:composer/remdex/livehelperchat@2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.01v", "product": { "name": "vers:unknown/2.01v", "product_id": "CSAFPID-3392555" } }, { "category": "product_version_range", "name": "vers:unknown/2.02v", "product": { "name": "vers:unknown/2.02v", "product_id": "CSAFPID-3392556" } }, { "category": "product_version_range", "name": "vers:unknown/2.06v", "product": { "name": "vers:unknown/2.06v", "product_id": "CSAFPID-3392557" } }, { "category": "product_version_range", "name": "vers:unknown/2.07v", "product": { "name": "vers:unknown/2.07v", "product_id": "CSAFPID-3392558" } }, { "category": "product_version_range", "name": "vers:unknown/2.10v", "product": { "name": "vers:unknown/2.10v", "product_id": "CSAFPID-3392559" } }, { "category": "product_version_range", "name": "vers:unknown/2.11v", "product": { "name": "vers:unknown/2.11v", "product_id": "CSAFPID-3392560" } }, { "category": "product_version_range", "name": "vers:unknown/2.13v", "product": { "name": "vers:unknown/2.13v", "product_id": "CSAFPID-3392561" } }, { "category": "product_version_range", "name": "vers:unknown/2.15v", "product": { "name": "vers:unknown/2.15v", "product_id": "CSAFPID-3392562" } }, { "category": "product_version_range", "name": "vers:unknown/2.16v", "product": { "name": "vers:unknown/2.16v", "product_id": "CSAFPID-3392563" } }, { "category": "product_version_range", "name": "vers:unknown/2.17v", "product": { "name": "vers:unknown/2.17v", "product_id": "CSAFPID-3392564" } }, { "category": "product_version_range", "name": "vers:unknown/2.20v", "product": { "name": "vers:unknown/2.20v", "product_id": "CSAFPID-3392565" } }, { "category": "product_version_range", "name": "vers:unknown/2.22v", "product": { "name": "vers:unknown/2.22v", "product_id": "CSAFPID-3392566" } }, { "category": "product_version_range", "name": "vers:unknown/2.24v", "product": { "name": "vers:unknown/2.24v", "product_id": "CSAFPID-3392567" } }, { "category": "product_version_range", "name": "vers:unknown/2.25v", "product": { "name": "vers:unknown/2.25v", "product_id": "CSAFPID-3392568" } }, { "category": "product_version_range", "name": "vers:unknown/2.26v", "product": { "name": "vers:unknown/2.26v", "product_id": "CSAFPID-3392569" } }, { "category": "product_version_range", "name": "vers:unknown/2.27v", "product": { "name": "vers:unknown/2.27v", "product_id": "CSAFPID-3392570" } }, { "category": "product_version_range", "name": "vers:unknown/2.28v", "product": { "name": "vers:unknown/2.28v", "product_id": "CSAFPID-3392571" } }, { "category": "product_version_range", "name": "vers:unknown/2.29v", "product": { "name": "vers:unknown/2.29v", "product_id": "CSAFPID-3392572" } }, { "category": "product_version_range", "name": "vers:unknown/2.30v", "product": { "name": "vers:unknown/2.30v", "product_id": "CSAFPID-3392573" } }, { "category": "product_version_range", "name": "vers:unknown/2.31v", "product": { "name": "vers:unknown/2.31v", "product_id": "CSAFPID-3392574" } }, { "category": "product_version_range", "name": "vers:unknown/2.32v", "product": { "name": "vers:unknown/2.32v", "product_id": "CSAFPID-3392575" } }, { "category": "product_version_range", "name": "vers:unknown/2.33v", "product": { "name": "vers:unknown/2.33v", "product_id": "CSAFPID-3392576" } }, { "category": "product_version_range", "name": "vers:unknown/2.34v", "product": { "name": "vers:unknown/2.34v", "product_id": "CSAFPID-3392577" } }, { "category": "product_version_range", "name": "vers:unknown/2.35v", "product": { "name": "vers:unknown/2.35v", "product_id": "CSAFPID-3392578" } }, { "category": "product_version_range", "name": "vers:unknown/2.36v", "product": { "name": "vers:unknown/2.36v", "product_id": "CSAFPID-3392579" } }, { "category": "product_version_range", "name": "vers:unknown/2.37v", "product": { "name": "vers:unknown/2.37v", "product_id": "CSAFPID-3392580" } }, { "category": "product_version_range", "name": "vers:unknown/2.38v", "product": { "name": "vers:unknown/2.38v", "product_id": "CSAFPID-3392581" } }, { "category": "product_version_range", "name": "vers:unknown/2.39v", "product": { "name": "vers:unknown/2.39v", "product_id": "CSAFPID-3392582" } }, { "category": "product_version_range", "name": "vers:unknown/2.40v", "product": { "name": "vers:unknown/2.40v", "product_id": "CSAFPID-3392583" } }, { "category": "product_version_range", "name": "vers:unknown/2.41v", "product": { "name": "vers:unknown/2.41v", "product_id": "CSAFPID-3392584" } }, { "category": "product_version_range", "name": "vers:unknown/2.42v", "product": { "name": "vers:unknown/2.42v", "product_id": "CSAFPID-3392585" } }, { "category": "product_version_range", "name": "vers:unknown/2.43v", "product": { "name": "vers:unknown/2.43v", "product_id": "CSAFPID-3392586" } }, { "category": "product_version_range", "name": "vers:unknown/2.45v", "product": { "name": "vers:unknown/2.45v", "product_id": "CSAFPID-3392587" } }, { "category": "product_version_range", "name": "vers:unknown/2.46v", "product": { "name": "vers:unknown/2.46v", "product_id": "CSAFPID-3392588" } }, { "category": "product_version_range", "name": "vers:unknown/2.47v", "product": { "name": "vers:unknown/2.47v", "product_id": "CSAFPID-3392589" } }, { "category": "product_version_range", "name": "vers:unknown/2.48v", "product": { "name": "vers:unknown/2.48v", "product_id": "CSAFPID-3392590" } }, { "category": "product_version_range", "name": "vers:unknown/2.49v", "product": { "name": "vers:unknown/2.49v", "product_id": "CSAFPID-3392591" } }, { "category": "product_version_range", "name": "vers:unknown/2.50v", "product": { "name": "vers:unknown/2.50v", "product_id": "CSAFPID-3392592" } }, { "category": "product_version_range", "name": "vers:unknown/2.51v", "product": { "name": "vers:unknown/2.51v", "product_id": "CSAFPID-3392593" } }, { "category": "product_version_range", "name": "vers:unknown/2.52v", "product": { "name": "vers:unknown/2.52v", "product_id": "CSAFPID-3392594" } }, { "category": "product_version_range", "name": "vers:unknown/2.53v", "product": { "name": "vers:unknown/2.53v", "product_id": "CSAFPID-3392595" } }, { "category": "product_version_range", "name": "vers:unknown/2.54v", "product": { "name": "vers:unknown/2.54v", "product_id": "CSAFPID-3392596" } }, { "category": "product_version_range", "name": "vers:unknown/2.56v", "product": { "name": "vers:unknown/2.56v", "product_id": "CSAFPID-3392597" } }, { "category": "product_version_range", "name": "vers:unknown/2.57v", "product": { "name": "vers:unknown/2.57v", "product_id": "CSAFPID-3392598" } }, { "category": "product_version_range", "name": "vers:unknown/2.58v", "product": { "name": "vers:unknown/2.58v", "product_id": "CSAFPID-3392599" } }, { "category": "product_version_range", "name": "vers:unknown/2.60v", "product": { "name": "vers:unknown/2.60v", "product_id": "CSAFPID-3392600" } }, { "category": "product_version_range", "name": "vers:unknown/2.61v", "product": { "name": "vers:unknown/2.61v", "product_id": "CSAFPID-3392601" } }, { "category": "product_version_range", "name": "vers:unknown/2.62v", "product": { "name": "vers:unknown/2.62v", "product_id": "CSAFPID-3392602" } }, { "category": "product_version_range", "name": "vers:unknown/2.63v", "product": { "name": "vers:unknown/2.63v", "product_id": "CSAFPID-3392603" } }, { "category": "product_version_range", "name": "vers:unknown/2.64v", "product": { "name": "vers:unknown/2.64v", "product_id": "CSAFPID-3392604" } }, { "category": "product_version_range", "name": "vers:unknown/2.65v", "product": { "name": "vers:unknown/2.65v", "product_id": "CSAFPID-3392605" } }, { "category": "product_version_range", "name": "vers:unknown/2.66v", "product": { "name": "vers:unknown/2.66v", "product_id": "CSAFPID-3392606" } }, { "category": "product_version_range", "name": "vers:unknown/2.67v", "product": { "name": "vers:unknown/2.67v", "product_id": "CSAFPID-3392607" } }, { "category": "product_version_range", "name": "vers:unknown/2.68v", "product": { "name": "vers:unknown/2.68v", "product_id": "CSAFPID-3392608" } }, { "category": "product_version_range", "name": "vers:unknown/2.69.1v", "product": { "name": "vers:unknown/2.69.1v", "product_id": "CSAFPID-3392609" } }, { "category": "product_version_range", "name": "vers:unknown/2.69v", "product": { "name": "vers:unknown/2.69v", "product_id": "CSAFPID-3392610" } }, { "category": "product_version_range", "name": "vers:unknown/2.70v", "product": { "name": "vers:unknown/2.70v", "product_id": "CSAFPID-3392611" } }, { "category": "product_version_range", "name": "vers:unknown/2.71v", "product": { "name": "vers:unknown/2.71v", "product_id": "CSAFPID-3392612" } }, { "category": "product_version_range", "name": "vers:unknown/2.72v", "product": { "name": "vers:unknown/2.72v", "product_id": "CSAFPID-3392613" } }, { "category": "product_version_range", "name": "vers:unknown/2.73v", "product": { "name": "vers:unknown/2.73v", "product_id": "CSAFPID-3392614" } }, { "category": "product_version_range", "name": "vers:unknown/2.74v", "product": { "name": "vers:unknown/2.74v", "product_id": "CSAFPID-3392615" } }, { "category": "product_version_range", "name": "vers:unknown/2.75v", "product": { "name": "vers:unknown/2.75v", "product_id": "CSAFPID-3392616" } }, { "category": "product_version_range", "name": "vers:unknown/2.76v", "product": { "name": "vers:unknown/2.76v", "product_id": "CSAFPID-3392617" } }, { "category": "product_version_range", "name": "vers:unknown/2.77v", "product": { "name": "vers:unknown/2.77v", "product_id": "CSAFPID-3392618" } }, { "category": "product_version_range", "name": "vers:unknown/2.78v", "product": { "name": "vers:unknown/2.78v", "product_id": "CSAFPID-3392619" } }, { "category": "product_version_range", "name": "vers:unknown/2.79v", "product": { "name": "vers:unknown/2.79v", "product_id": "CSAFPID-3392620" } }, { "category": "product_version_range", "name": "vers:unknown/2.80v", "product": { "name": "vers:unknown/2.80v", "product_id": "CSAFPID-3392621" } }, { "category": "product_version_range", "name": "vers:unknown/2.81v", "product": { "name": "vers:unknown/2.81v", "product_id": "CSAFPID-3392622" } }, { "category": "product_version_range", "name": "vers:unknown/2.82v", "product": { "name": "vers:unknown/2.82v", "product_id": "CSAFPID-3392623" } }, { "category": "product_version_range", "name": "vers:unknown/2.83v", "product": { "name": "vers:unknown/2.83v", "product_id": "CSAFPID-3392624" } }, { "category": "product_version_range", "name": "vers:unknown/2.84v", "product": { "name": "vers:unknown/2.84v", "product_id": "CSAFPID-3392625" } }, { "category": "product_version_range", "name": "vers:unknown/2.85v", "product": { "name": "vers:unknown/2.85v", "product_id": "CSAFPID-3392626" } }, { "category": "product_version_range", "name": "vers:unknown/2.86v", "product": { "name": "vers:unknown/2.86v", "product_id": "CSAFPID-3392627" } }, { "category": "product_version_range", "name": "vers:unknown/2.87v", "product": { "name": "vers:unknown/2.87v", "product_id": "CSAFPID-3392628" } }, { "category": "product_version_range", "name": "vers:unknown/2.88v", "product": { "name": "vers:unknown/2.88v", "product_id": "CSAFPID-3392629" } }, { "category": "product_version_range", "name": "vers:unknown/2.90v", "product": { "name": "vers:unknown/2.90v", "product_id": "CSAFPID-3392630" } }, { "category": "product_version_range", "name": "vers:unknown/2.91v", "product": { "name": "vers:unknown/2.91v", "product_id": "CSAFPID-3392631" } }, { "category": "product_version_range", "name": "vers:unknown/2.92v", "product": { "name": "vers:unknown/2.92v", "product_id": "CSAFPID-3392632" } }, { "category": "product_version_range", "name": "vers:unknown/2.93v", "product": { "name": "vers:unknown/2.93v", "product_id": "CSAFPID-3392633" } }, { "category": "product_version_range", "name": "vers:unknown/2.94v", "product": { "name": "vers:unknown/2.94v", "product_id": "CSAFPID-3392634" } }, { "category": "product_version_range", "name": "vers:unknown/2.95v", "product": { "name": "vers:unknown/2.95v", "product_id": "CSAFPID-3392635" } }, { "category": "product_version_range", "name": "vers:unknown/2.96v", "product": { "name": "vers:unknown/2.96v", "product_id": "CSAFPID-3392636" } }, { "category": "product_version_range", "name": "vers:unknown/2.97v", "product": { "name": "vers:unknown/2.97v", "product_id": "CSAFPID-3392637" } }, { "category": "product_version_range", "name": "vers:unknown/2.98v", "product": { "name": "vers:unknown/2.98v", "product_id": "CSAFPID-3392638" } }, { "category": "product_version_range", "name": "vers:unknown/2.99v", "product": { "name": "vers:unknown/2.99v", "product_id": "CSAFPID-3392639" } }, { "category": "product_version_range", "name": "vers:unknown/3.00v", "product": { "name": "vers:unknown/3.00v", "product_id": "CSAFPID-3392640" } }, { "category": "product_version_range", "name": "vers:unknown/3.01v", "product": { "name": "vers:unknown/3.01v", "product_id": "CSAFPID-3392641" } }, { "category": "product_version_range", "name": "vers:unknown/3.02v", "product": { "name": "vers:unknown/3.02v", "product_id": "CSAFPID-3392642" } }, { "category": "product_version_range", "name": "vers:unknown/3.03v", "product": { "name": "vers:unknown/3.03v", "product_id": "CSAFPID-3392643" } }, { "category": "product_version_range", "name": "vers:unknown/3.04v", "product": { "name": "vers:unknown/3.04v", "product_id": "CSAFPID-3392644" } }, { "category": "product_version_range", "name": "vers:unknown/3.05v", "product": { "name": "vers:unknown/3.05v", "product_id": "CSAFPID-3392645" } }, { "category": "product_version_range", "name": "vers:unknown/3.06v", "product": { "name": "vers:unknown/3.06v", "product_id": "CSAFPID-3392646" } }, { "category": "product_version_range", "name": "vers:unknown/3.07v", "product": { "name": "vers:unknown/3.07v", "product_id": "CSAFPID-3392647" } }, { "category": "product_version_range", "name": "vers:unknown/3.08v", "product": { "name": "vers:unknown/3.08v", "product_id": "CSAFPID-3392648" } }, { "category": "product_version_range", "name": "vers:unknown/3.09v", "product": { "name": "vers:unknown/3.09v", "product_id": "CSAFPID-3392649" } }, { "category": "product_version_range", "name": "vers:unknown/3.10v", "product": { "name": "vers:unknown/3.10v", "product_id": "CSAFPID-3392650" } }, { "category": "product_version_range", "name": "vers:unknown/3.11v", "product": { "name": "vers:unknown/3.11v", "product_id": "CSAFPID-3392651" } }, { "category": "product_version_range", "name": "vers:unknown/3.12v", "product": { "name": "vers:unknown/3.12v", "product_id": "CSAFPID-3392652" } }, { "category": "product_version_range", "name": "vers:unknown/3.13v", "product": { "name": "vers:unknown/3.13v", "product_id": "CSAFPID-3392653" } }, { "category": "product_version_range", "name": "vers:unknown/3.14v", "product": { "name": "vers:unknown/3.14v", "product_id": "CSAFPID-3392654" } }, { "category": "product_version_range", "name": "vers:unknown/3.15v", "product": { "name": "vers:unknown/3.15v", "product_id": "CSAFPID-3392655" } }, { "category": "product_version_range", "name": "vers:unknown/3.16v", "product": { "name": "vers:unknown/3.16v", "product_id": "CSAFPID-3392656" } }, { "category": "product_version_range", "name": "vers:unknown/3.17v", "product": { "name": "vers:unknown/3.17v", "product_id": "CSAFPID-3392657" } }, { "category": "product_version_range", "name": "vers:unknown/3.18v", "product": { "name": "vers:unknown/3.18v", "product_id": "CSAFPID-3392658" } }, { "category": "product_version_range", "name": "vers:unknown/3.19v", "product": { "name": "vers:unknown/3.19v", "product_id": "CSAFPID-3392659" } }, { "category": "product_version_range", "name": "vers:unknown/3.20v", "product": { "name": "vers:unknown/3.20v", "product_id": "CSAFPID-3392660" } }, { "category": "product_version_range", "name": "vers:unknown/3.21v", "product": { "name": "vers:unknown/3.21v", "product_id": "CSAFPID-3392661" } }, { "category": "product_version_range", "name": "vers:unknown/3.22v", "product": { "name": "vers:unknown/3.22v", "product_id": "CSAFPID-3392662" } }, { "category": "product_version_range", "name": "vers:unknown/3.23v", "product": { "name": "vers:unknown/3.23v", "product_id": "CSAFPID-3392663" } }, { "category": "product_version_range", "name": "vers:unknown/3.24v", "product": { "name": "vers:unknown/3.24v", "product_id": "CSAFPID-3392664" } }, { "category": "product_version_range", "name": "vers:unknown/3.25v", "product": { "name": "vers:unknown/3.25v", "product_id": "CSAFPID-3392665" } }, { "category": "product_version_range", "name": "vers:unknown/3.26v", "product": { "name": "vers:unknown/3.26v", "product_id": "CSAFPID-3392666" } }, { "category": "product_version_range", "name": "vers:unknown/3.27.0v", "product": { "name": "vers:unknown/3.27.0v", "product_id": "CSAFPID-3392667" } }, { "category": "product_version_range", "name": "vers:unknown/3.27v", "product": { "name": "vers:unknown/3.27v", "product_id": "CSAFPID-3392668" } }, { "category": "product_version_range", "name": "vers:unknown/3.28v", "product": { "name": "vers:unknown/3.28v", "product_id": "CSAFPID-3392669" } }, { "category": "product_version_range", "name": "vers:unknown/3.29v", "product": { "name": "vers:unknown/3.29v", "product_id": "CSAFPID-3392670" } }, { "category": "product_version_range", "name": "vers:unknown/3.30v", "product": { "name": "vers:unknown/3.30v", "product_id": "CSAFPID-3392671" } }, { "category": "product_version_range", "name": "vers:unknown/3.31v", "product": { "name": "vers:unknown/3.31v", "product_id": "CSAFPID-3392672" } }, { "category": "product_version_range", "name": "vers:unknown/3.32v", "product": { "name": "vers:unknown/3.32v", "product_id": "CSAFPID-3392673" } }, { "category": "product_version_range", "name": "vers:unknown/3.33v", "product": { "name": "vers:unknown/3.33v", "product_id": "CSAFPID-3392674" } }, { "category": "product_version_range", "name": "vers:unknown/3.35v", "product": { "name": "vers:unknown/3.35v", "product_id": "CSAFPID-3392675" } }, { "category": "product_version_range", "name": "vers:unknown/3.36v", "product": { "name": "vers:unknown/3.36v", "product_id": "CSAFPID-3392676" } }, { "category": "product_version_range", "name": "vers:unknown/3.37v", "product": { "name": "vers:unknown/3.37v", "product_id": "CSAFPID-3392677" } }, { "category": "product_version_range", "name": "vers:unknown/3.38v", "product": { "name": "vers:unknown/3.38v", "product_id": "CSAFPID-3392678" } }, { "category": "product_version_range", "name": "vers:unknown/3.39v", "product": { "name": "vers:unknown/3.39v", "product_id": "CSAFPID-3392679" } }, { "category": "product_version_range", "name": "vers:unknown/3.40v", "product": { "name": "vers:unknown/3.40v", "product_id": "CSAFPID-3392680" } }, { "category": "product_version_range", "name": "vers:unknown/3.41v", "product": { "name": "vers:unknown/3.41v", "product_id": "CSAFPID-3392681" } }, { "category": "product_version_range", "name": "vers:unknown/3.42v", "product": { "name": "vers:unknown/3.42v", "product_id": "CSAFPID-3392682" } }, { "category": "product_version_range", "name": "vers:unknown/3.44v", "product": { "name": "vers:unknown/3.44v", "product_id": "CSAFPID-3686662" } }, { "category": "product_version_range", "name": "vers:unknown/3.45v", "product": { "name": "vers:unknown/3.45v", "product_id": "CSAFPID-3686663" } }, { "category": "product_version_range", "name": "vers:unknown/3.46v", "product": { "name": "vers:unknown/3.46v", "product_id": "CSAFPID-3686664" } }, { "category": "product_version_range", "name": "vers:unknown/3.47v", "product": { "name": "vers:unknown/3.47v", "product_id": "CSAFPID-3686665" } }, { "category": "product_version_range", "name": "vers:unknown/3.48v", "product": { "name": "vers:unknown/3.48v", "product_id": "CSAFPID-3686666" } }, { "category": "product_version_range", "name": "vers:unknown/3.49v", "product": { "name": "vers:unknown/3.49v", "product_id": "CSAFPID-3686667" } }, { "category": "product_version_range", "name": "vers:unknown/3.50v", "product": { "name": "vers:unknown/3.50v", "product_id": "CSAFPID-3686668" } }, { "category": "product_version_range", "name": "vers:unknown/3.51v", "product": { "name": "vers:unknown/3.51v", "product_id": "CSAFPID-3686669" } }, { "category": "product_version_range", "name": "vers:unknown/3.52v", "product": { "name": "vers:unknown/3.52v", "product_id": "CSAFPID-3686670" } }, { "category": "product_version_range", "name": "vers:unknown/3.53v", "product": { "name": "vers:unknown/3.53v", "product_id": "CSAFPID-3686671" } }, { "category": "product_version_range", "name": "vers:unknown/3.54v", "product": { "name": "vers:unknown/3.54v", "product_id": "CSAFPID-3686672" } }, { "category": "product_version_range", "name": "vers:unknown/3.55v", "product": { "name": "vers:unknown/3.55v", "product_id": "CSAFPID-3686673" } }, { "category": "product_version_range", "name": "vers:unknown/3.56v", "product": { "name": "vers:unknown/3.56v", "product_id": "CSAFPID-3686674" } }, { "category": "product_version_range", "name": "vers:unknown/3.57v", "product": { "name": "vers:unknown/3.57v", "product_id": "CSAFPID-3686675" } }, { "category": "product_version_range", "name": "vers:unknown/3.58v", "product": { "name": "vers:unknown/3.58v", "product_id": "CSAFPID-3686676" } }, { "category": "product_version_range", "name": "vers:unknown/3.59v", "product": { "name": "vers:unknown/3.59v", "product_id": "CSAFPID-3686677" } }, { "category": "product_version_range", "name": "vers:unknown/3.60v", "product": { "name": "vers:unknown/3.60v", "product_id": "CSAFPID-3686678" } }, { "category": "product_version_range", "name": "vers:unknown/3.61v", "product": { "name": "vers:unknown/3.61v", "product_id": "CSAFPID-3686679" } }, { "category": "product_version_range", "name": "vers:unknown/3.62v", "product": { "name": "vers:unknown/3.62v", "product_id": "CSAFPID-3686680" } }, { "category": "product_version_range", "name": "vers:unknown/3.63v", "product": { "name": "vers:unknown/3.63v", "product_id": "CSAFPID-3686681" } }, { "category": "product_version_range", "name": "vers:unknown/3.64v", "product": { "name": "vers:unknown/3.64v", "product_id": "CSAFPID-3686682" } }, { "category": "product_version_range", "name": "vers:unknown/3.65v", "product": { "name": "vers:unknown/3.65v", "product_id": "CSAFPID-3686683" } }, { "category": "product_version_range", "name": "vers:unknown/3.66v", "product": { "name": "vers:unknown/3.66v", "product_id": "CSAFPID-3686684" } }, { "category": "product_version_range", "name": "vers:unknown/3.67v", "product": { "name": "vers:unknown/3.67v", "product_id": "CSAFPID-3686685" } }, { "category": "product_version_range", "name": "vers:unknown/3.68v", "product": { "name": "vers:unknown/3.68v", "product_id": "CSAFPID-3686686" } }, { "category": "product_version_range", "name": "vers:unknown/3.69v", "product": { "name": "vers:unknown/3.69v", "product_id": "CSAFPID-3686687" } }, { "category": "product_version_range", "name": "vers:unknown/3.70v", "product": { "name": "vers:unknown/3.70v", "product_id": "CSAFPID-3686688" } }, { "category": "product_version_range", "name": "vers:unknown/3.71v", "product": { "name": "vers:unknown/3.71v", "product_id": "CSAFPID-3686689" } }, { "category": "product_version_range", "name": "vers:unknown/3.72v", "product": { "name": "vers:unknown/3.72v", "product_id": "CSAFPID-3686690" } }, { "category": "product_version_range", "name": "vers:unknown/3.73v", "product": { "name": "vers:unknown/3.73v", "product_id": "CSAFPID-3686691" } }, { "category": "product_version_range", "name": "vers:unknown/3.74v", "product": { "name": "vers:unknown/3.74v", "product_id": "CSAFPID-3686692" } }, { "category": "product_version_range", "name": "vers:unknown/3.75v", "product": { "name": "vers:unknown/3.75v", "product_id": "CSAFPID-3686693" } }, { "category": "product_version_range", "name": "vers:unknown/3.76v", "product": { "name": "vers:unknown/3.76v", "product_id": "CSAFPID-3686694" } }, { "category": "product_version_range", "name": "vers:unknown/3.77v", "product": { "name": "vers:unknown/3.77v", "product_id": "CSAFPID-3686695" } }, { "category": "product_version_range", "name": "vers:unknown/3.78v", "product": { "name": "vers:unknown/3.78v", "product_id": "CSAFPID-3686696" } }, { "category": "product_version_range", "name": "vers:unknown/3.79v", "product": { "name": "vers:unknown/3.79v", "product_id": "CSAFPID-3686697" } }, { "category": "product_version_range", "name": "vers:unknown/3.80v", "product": { "name": "vers:unknown/3.80v", "product_id": "CSAFPID-3686698" } }, { "category": "product_version_range", "name": "vers:unknown/3.81v", "product": { "name": "vers:unknown/3.81v", "product_id": "CSAFPID-3686699" } }, { "category": "product_version_range", "name": "vers:unknown/3.82v", "product": { "name": "vers:unknown/3.82v", "product_id": "CSAFPID-3686700" } }, { "category": "product_version_range", "name": "vers:unknown/3.83v", "product": { "name": "vers:unknown/3.83v", "product_id": "CSAFPID-3686701" } }, { "category": "product_version_range", "name": "vers:unknown/3.84v", "product": { "name": "vers:unknown/3.84v", "product_id": "CSAFPID-3686702" } }, { "category": "product_version_range", "name": "vers:unknown/3.85v", "product": { "name": "vers:unknown/3.85v", "product_id": "CSAFPID-3686703" } }, { "category": "product_version_range", "name": "vers:unknown/3.86v", "product": { "name": "vers:unknown/3.86v", "product_id": "CSAFPID-3686704" } }, { "category": "product_version_range", "name": "vers:unknown/3.87v", "product": { "name": "vers:unknown/3.87v", "product_id": "CSAFPID-3686705" } }, { "category": "product_version_range", "name": "vers:unknown/3.88v", "product": { "name": "vers:unknown/3.88v", "product_id": "CSAFPID-3686706" } }, { "category": "product_version_range", "name": "vers:unknown/3.89v", "product": { "name": "vers:unknown/3.89v", "product_id": "CSAFPID-3686707" } }, { "category": "product_version_range", "name": "vers:unknown/3.90v", "product": { "name": "vers:unknown/3.90v", "product_id": "CSAFPID-3686708" } }, { "category": "product_version_range", "name": "vers:unknown/3.91v", "product": { "name": "vers:unknown/3.91v", "product_id": "CSAFPID-3686709" } }, { "category": "product_version_range", "name": "vers:unknown/3.92v", "product": { "name": "vers:unknown/3.92v", "product_id": "CSAFPID-3686710" } }, { "category": "product_version_range", "name": "vers:unknown/3.93v", "product": { "name": "vers:unknown/3.93v", "product_id": "CSAFPID-3686711" } }, { "category": "product_version_range", "name": "vers:unknown/3.94v", "product": { "name": "vers:unknown/3.94v", "product_id": "CSAFPID-3686712" } }, { "category": "product_version_range", "name": "vers:unknown/3.95v", "product": { "name": "vers:unknown/3.95v", "product_id": "CSAFPID-3686713" } }, { "category": "product_version_range", "name": "vers:unknown/3.96v", "product": { "name": "vers:unknown/3.96v", "product_id": "CSAFPID-3686714" } }, { "category": "product_version_range", "name": "vers:unknown/3.97v", "product": { "name": "vers:unknown/3.97v", "product_id": "CSAFPID-3686715" } }, { "category": "product_version_range", "name": "vers:unknown/3.98v", "product": { "name": "vers:unknown/3.98v", "product_id": "CSAFPID-3686716" } }, { "category": "product_version_range", "name": "vers:unknown/3.99v", "product": { "name": "vers:unknown/3.99v", "product_id": "CSAFPID-3686717" } }, { "category": "product_version_range", "name": "vers:unknown/4.00v", "product": { "name": "vers:unknown/4.00v", "product_id": "CSAFPID-3686718" } }, { "category": "product_version_range", "name": "vers:unknown/4.01v", "product": { "name": "vers:unknown/4.01v", "product_id": "CSAFPID-3686719" } }, { "category": "product_version_range", "name": "vers:unknown/4.02v", "product": { "name": "vers:unknown/4.02v", "product_id": "CSAFPID-3686720" } }, { "category": "product_version_range", "name": "vers:unknown/4.03v", "product": { "name": "vers:unknown/4.03v", "product_id": "CSAFPID-3686721" } }, { "category": "product_version_range", "name": "vers:unknown/4.04v", "product": { "name": "vers:unknown/4.04v", "product_id": "CSAFPID-3686722" } }, { "category": "product_version_range", "name": "vers:unknown/4.05v", "product": { "name": "vers:unknown/4.05v", "product_id": "CSAFPID-3686723" } }, { "category": "product_version_range", "name": "vers:unknown/4.06v", "product": { "name": "vers:unknown/4.06v", "product_id": "CSAFPID-3686724" } }, { "category": "product_version_range", "name": "vers:unknown/4.07v", "product": { "name": "vers:unknown/4.07v", "product_id": "CSAFPID-3686725" } }, { "category": "product_version_range", "name": "vers:unknown/4.08v", "product": { "name": "vers:unknown/4.08v", "product_id": "CSAFPID-3686726" } }, { "category": "product_version_range", "name": "vers:unknown/4.09v", "product": { "name": "vers:unknown/4.09v", "product_id": "CSAFPID-3686727" } }, { "category": "product_version_range", "name": "vers:unknown/4.10v", "product": { "name": "vers:unknown/4.10v", "product_id": "CSAFPID-3686728" } }, { "category": "product_version_range", "name": "vers:unknown/4.11v", "product": { "name": "vers:unknown/4.11v", "product_id": "CSAFPID-3686729" } }, { "category": "product_version_range", "name": "vers:unknown/4.12v", "product": { "name": "vers:unknown/4.12v", "product_id": "CSAFPID-3686730" } }, { "category": "product_version_range", "name": "vers:unknown/4.13v", "product": { "name": "vers:unknown/4.13v", "product_id": "CSAFPID-3686731" } }, { "category": "product_version_range", "name": "vers:unknown/4.14v", "product": { "name": "vers:unknown/4.14v", "product_id": "CSAFPID-3686732" } }, { "category": "product_version_range", "name": "vers:unknown/4.15v", "product": { "name": "vers:unknown/4.15v", "product_id": "CSAFPID-3686733" } }, { "category": "product_version_range", "name": "vers:unknown/4.16v", "product": { "name": "vers:unknown/4.16v", "product_id": "CSAFPID-3686734" } }, { "category": "product_version_range", "name": "vers:unknown/4.17v", "product": { "name": "vers:unknown/4.17v", "product_id": "CSAFPID-3686735" } }, { "category": "product_version_range", "name": "vers:unknown/4.18v", "product": { "name": "vers:unknown/4.18v", "product_id": "CSAFPID-3686736" } }, { "category": "product_version_range", "name": "vers:unknown/4.19v", "product": { "name": "vers:unknown/4.19v", "product_id": "CSAFPID-3686737" } }, { "category": "product_version_range", "name": "vers:unknown/4.20v", "product": { "name": "vers:unknown/4.20v", "product_id": "CSAFPID-3686738" } }, { "category": "product_version_range", "name": "vers:unknown/4.21v", "product": { "name": "vers:unknown/4.21v", "product_id": "CSAFPID-3686739" } }, { "category": "product_version_range", "name": "vers:unknown/4.22v", "product": { "name": "vers:unknown/4.22v", "product_id": "CSAFPID-3686740" } }, { "category": "product_version_range", "name": "vers:unknown/4.23v", "product": { "name": "vers:unknown/4.23v", "product_id": "CSAFPID-3686741" } }, { "category": "product_version_range", "name": "vers:unknown/4.24v", "product": { "name": "vers:unknown/4.24v", "product_id": "CSAFPID-3686742" } }, { "category": "product_version_range", "name": "vers:unknown/4.25v", "product": { "name": "vers:unknown/4.25v", "product_id": "CSAFPID-3686743" } }, { "category": "product_version_range", "name": "vers:unknown/4.26v", "product": { "name": "vers:unknown/4.26v", "product_id": "CSAFPID-3686744" } }, { "category": "product_version_range", "name": "vers:unknown/4.27v", "product": { "name": "vers:unknown/4.27v", "product_id": "CSAFPID-3686745" } }, { "category": "product_version_range", "name": "vers:unknown/4.28v", "product": { "name": "vers:unknown/4.28v", "product_id": "CSAFPID-3686746" } }, { "category": "product_version_range", "name": "vers:unknown/4.29v", "product": { "name": "vers:unknown/4.29v", "product_id": "CSAFPID-3686747" } }, { "category": "product_version_range", "name": "vers:unknown/4.30v", "product": { "name": "vers:unknown/4.30v", "product_id": "CSAFPID-3686748" } }, { "category": "product_version_range", "name": "vers:unknown/4.31v", "product": { "name": "vers:unknown/4.31v", "product_id": "CSAFPID-3686749" } }, { "category": "product_version_range", "name": "vers:unknown/4.32v", "product": { "name": "vers:unknown/4.32v", "product_id": "CSAFPID-3686750" } }, { "category": "product_version_range", "name": "vers:unknown/4.33v", "product": { "name": "vers:unknown/4.33v", "product_id": "CSAFPID-3686751" } }, { "category": "product_version_range", "name": "vers:unknown/4.34v", "product": { "name": "vers:unknown/4.34v", "product_id": "CSAFPID-3686752" } }, { "category": "product_version_range", "name": "vers:unknown/4.35v", "product": { "name": "vers:unknown/4.35v", "product_id": "CSAFPID-3686753" } }, { "category": "product_version_range", "name": "vers:unknown/4.36v", "product": { "name": "vers:unknown/4.36v", "product_id": "CSAFPID-3686754" } }, { "category": "product_version_range", "name": "vers:unknown/4.37v", "product": { "name": "vers:unknown/4.37v", "product_id": "CSAFPID-3686755" } }, { "category": "product_version_range", "name": "vers:unknown/4.38v", "product": { "name": "vers:unknown/4.38v", "product_id": "CSAFPID-3686756" } }, { "category": "product_version_range", "name": "vers:unknown/4.39v", "product": { "name": "vers:unknown/4.39v", "product_id": "CSAFPID-3686757" } }, { "category": "product_version_range", "name": "vers:unknown/4.40v", "product": { "name": "vers:unknown/4.40v", "product_id": "CSAFPID-3686758" } }, { "category": "product_version_range", "name": "vers:unknown/4.41v", "product": { "name": "vers:unknown/4.41v", "product_id": "CSAFPID-3686759" } }, { "category": "product_version_range", "name": "vers:unknown/4.42.v", "product": { "name": "vers:unknown/4.42.v", "product_id": "CSAFPID-3686760" } }, { "category": "product_version_range", "name": "vers:unknown/4.42v", "product": { "name": "vers:unknown/4.42v", "product_id": "CSAFPID-3686761" } }, { "category": "product_version_range", "name": "vers:unknown/4.43v", "product": { "name": "vers:unknown/4.43v", "product_id": "CSAFPID-3686762" } }, { "category": "product_version_range", "name": "vers:unknown/4.44v", "product": { "name": "vers:unknown/4.44v", "product_id": "CSAFPID-3686763" } }, { "category": "product_version_range", "name": "vers:unknown/4.45v", "product": { "name": "vers:unknown/4.45v", "product_id": "CSAFPID-3686764" } }, { "category": "product_version_range", "name": "vers:unknown/4.46v", "product": { "name": "vers:unknown/4.46v", "product_id": "CSAFPID-3686765" } }, { "category": "product_version_range", "name": "vers:unknown/4.47v", "product": { "name": "vers:unknown/4.47v", "product_id": "CSAFPID-3686766" } }, { "category": "product_version_range", "name": "vers:unknown/4.48v", "product": { "name": "vers:unknown/4.48v", "product_id": "CSAFPID-3686767" } }, { "category": "product_version_range", "name": "vers:unknown/4.49v", "product": { "name": "vers:unknown/4.49v", "product_id": "CSAFPID-3686768" } }, { "category": "product_version_range", "name": "vers:unknown/4.50v", "product": { "name": "vers:unknown/4.50v", "product_id": "CSAFPID-3686769" } }, { "category": "product_version_range", "name": "vers:unknown/4.51v", "product": { "name": "vers:unknown/4.51v", "product_id": "CSAFPID-3686770" } }, { "category": "product_version_range", "name": "vers:unknown/4.52v", "product": { "name": "vers:unknown/4.52v", "product_id": "CSAFPID-3686771" } } ], "category": "product_name", "name": "livehelperchat" } ], "category": "vendor", "name": "Live Helper Chat" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<=4.52", "product": { "name": "vers:unknown/<=4.52", "product_id": "CSAFPID-5723465" } } ], "category": "product_name", "name": "livehelperchat" } ], "category": "vendor", "name": "LiveHelperChat" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-27954", "cwe": { "id": "CWE-862", "name": "Missing Authorization" }, "notes": [ { "category": "description", "text": "Live Helper Chat is an open-source application that enables live support websites. In versions up to and including 4.52, three chat action endpoints (holdaction.php, blockuser.php, and transferchat.php) load chat objects by ID without calling `erLhcoreClassChat::hasAccessToRead()`, allowing operators to act on chats in departments they are not assigned to. Operators with the relevant role permissions (holduse, allowblockusers, allowtransfer) can hold, block users from, or transfer chats in departments they are not assigned to. This is a horizontal privilege escalation within one organization. As of time of publication, no known patched versions are available.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-27954" }, { "category": "description", "text": "Live Helper Chat is an open-source application that enables live support websites. In versions up to and including 4.52, three chat action endpoints (holdaction.php, blockuser.php, and transferchat.php) load chat objects by ID without calling `erLhcoreClassChat::hasAccessToRead()`, allowing operators to act on chats in departments they are not assigned to. Operators with the relevant role permissions (holduse, allowblockusers, allowtransfer) can hold, block users from, or transfer chats in departments they are not assigned to. This is a horizontal privilege escalation within one organization. As of time of publication, no known patched versions are available.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-27954" }, { "category": "description", "text": "Live Helper Chat is an open-source application that enables live support websites. In versions up to and including 4.52, three chat action endpoints (holdaction.php, blockuser.php, and transferchat.php) load chat objects by ID without calling `erLhcoreClassChat::hasAccessToRead()`, allowing operators to act on chats in departments they are not assigned to. Operators with the relevant role permissions (holduse, allowblockusers, allowtransfer) can hold, block users from, or transfer chats in departments they are not assigned to. This is a horizontal privilege escalation within one organization. As of time of publication, no known patched versions are available.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-27954.json?alt=media" }, { "category": "other", "text": "0.00027", "title": "EPSS" }, { "category": "other", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "title": "CVSSV4" }, { "category": "other", "text": "4.9", "title": "CVSSV4 base score" }, { "category": "other", "text": "3.9", "title": "NCSC Score" }, { "category": "other", "text": "The value of the most recent CVSS (V3) score, Is related to (a version of) an uncommon product, Is related to an uncommon product vendor, Is related to CWE-862 (Missing Authorization), The value of the most recent EPSS score", "title": "NCSC Score top decreasing factors" } ], "product_status": { "known_affected": [ "CSAFPID-5723465", "CSAFPID-5736893", "CSAFPID-3392537", "CSAFPID-3392538", "CSAFPID-3392539", "CSAFPID-3392540", "CSAFPID-3392541", "CSAFPID-3392542", "CSAFPID-3392543", "CSAFPID-3392544", "CSAFPID-3392545", "CSAFPID-3392546", "CSAFPID-3392547", "CSAFPID-3392548", "CSAFPID-3392549", "CSAFPID-3392550", "CSAFPID-3392551", "CSAFPID-3392552", "CSAFPID-3392553", "CSAFPID-3392554", "CSAFPID-3392555", "CSAFPID-3392556", "CSAFPID-3392557", "CSAFPID-3392558", "CSAFPID-3392559", "CSAFPID-3392560", "CSAFPID-3392561", "CSAFPID-3392562", "CSAFPID-3392563", "CSAFPID-3392564", "CSAFPID-3392565", "CSAFPID-3392566", "CSAFPID-3392567", "CSAFPID-3392568", "CSAFPID-3392569", "CSAFPID-3392570", "CSAFPID-3392571", "CSAFPID-3392572", "CSAFPID-3392573", "CSAFPID-3392574", "CSAFPID-3392575", "CSAFPID-3392576", "CSAFPID-3392577", "CSAFPID-3392578", "CSAFPID-3392579", "CSAFPID-3392580", "CSAFPID-3392581", "CSAFPID-3392582", "CSAFPID-3392583", "CSAFPID-3392584", "CSAFPID-3392585", "CSAFPID-3392586", "CSAFPID-3392587", "CSAFPID-3392588", "CSAFPID-3392589", "CSAFPID-3392590", "CSAFPID-3392591", "CSAFPID-3392592", "CSAFPID-3392593", "CSAFPID-3392594", "CSAFPID-3392595", "CSAFPID-3392596", "CSAFPID-3392597", "CSAFPID-3392598", "CSAFPID-3392599", "CSAFPID-3392600", "CSAFPID-3392601", "CSAFPID-3392602", "CSAFPID-3392603", "CSAFPID-3392604", "CSAFPID-3392605", "CSAFPID-3392606", "CSAFPID-3392607", "CSAFPID-3392608", "CSAFPID-3392609", "CSAFPID-3392610", "CSAFPID-3392611", "CSAFPID-3392612", "CSAFPID-3392613", "CSAFPID-3392614", "CSAFPID-3392615", "CSAFPID-3392616", "CSAFPID-3392617", "CSAFPID-3392618", "CSAFPID-3392619", "CSAFPID-3392620", "CSAFPID-3392621", "CSAFPID-3392622", "CSAFPID-3392623", "CSAFPID-3392624", "CSAFPID-3392625", "CSAFPID-3392626", "CSAFPID-3392627", "CSAFPID-3392628", "CSAFPID-3392629", "CSAFPID-3392630", "CSAFPID-3392631", "CSAFPID-3392632", "CSAFPID-3392633", "CSAFPID-3392634", "CSAFPID-3392635", "CSAFPID-3392636", "CSAFPID-3392637", "CSAFPID-3392638", "CSAFPID-3392639", "CSAFPID-3392640", "CSAFPID-3392641", "CSAFPID-3392642", "CSAFPID-3392643", "CSAFPID-3392644", "CSAFPID-3392645", "CSAFPID-3392646", "CSAFPID-3392647", "CSAFPID-3392648", "CSAFPID-3392649", "CSAFPID-3392650", "CSAFPID-3392651", "CSAFPID-3392652", "CSAFPID-3392653", "CSAFPID-3392654", "CSAFPID-3392655", "CSAFPID-3392656", "CSAFPID-3392657", "CSAFPID-3392658", "CSAFPID-3392659", "CSAFPID-3392660", "CSAFPID-3392661", "CSAFPID-3392662", "CSAFPID-3392663", "CSAFPID-3392664", "CSAFPID-3392665", "CSAFPID-3392666", "CSAFPID-3392667", "CSAFPID-3392668", "CSAFPID-3392669", "CSAFPID-3392670", "CSAFPID-3392671", "CSAFPID-3392672", "CSAFPID-3392673", "CSAFPID-3392674", "CSAFPID-3392675", "CSAFPID-3392676", "CSAFPID-3392677", "CSAFPID-3392678", "CSAFPID-3392679", "CSAFPID-3392680", "CSAFPID-3392681", "CSAFPID-3392682", "CSAFPID-3686662", "CSAFPID-3686663", "CSAFPID-3686664", "CSAFPID-3686665", "CSAFPID-3686666", "CSAFPID-3686667", "CSAFPID-3686668", "CSAFPID-3686669", "CSAFPID-3686670", "CSAFPID-3686671", "CSAFPID-3686672", "CSAFPID-3686673", "CSAFPID-3686674", "CSAFPID-3686675", "CSAFPID-3686676", "CSAFPID-3686677", "CSAFPID-3686678", "CSAFPID-3686679", "CSAFPID-3686680", "CSAFPID-3686681", "CSAFPID-3686682", "CSAFPID-3686683", "CSAFPID-3686684", "CSAFPID-3686685", "CSAFPID-3686686", "CSAFPID-3686687", "CSAFPID-3686688", "CSAFPID-3686689", "CSAFPID-3686690", "CSAFPID-3686691", "CSAFPID-3686692", "CSAFPID-3686693", "CSAFPID-3686694", "CSAFPID-3686695", "CSAFPID-3686696", "CSAFPID-3686697", "CSAFPID-3686698", "CSAFPID-3686699", "CSAFPID-3686700", "CSAFPID-3686701", "CSAFPID-3686702", "CSAFPID-3686703", "CSAFPID-3686704", "CSAFPID-3686705", "CSAFPID-3686706", "CSAFPID-3686707", "CSAFPID-3686708", "CSAFPID-3686709", "CSAFPID-3686710", "CSAFPID-3686711", "CSAFPID-3686712", "CSAFPID-3686713", "CSAFPID-3686714", "CSAFPID-3686715", "CSAFPID-3686716", "CSAFPID-3686717", "CSAFPID-3686718", "CSAFPID-3686719", "CSAFPID-3686720", "CSAFPID-3686721", "CSAFPID-3686722", "CSAFPID-3686723", "CSAFPID-3686724", "CSAFPID-3686725", "CSAFPID-3686726", "CSAFPID-3686727", "CSAFPID-3686728", "CSAFPID-3686729", "CSAFPID-3686730", "CSAFPID-3686731", "CSAFPID-3686732", "CSAFPID-3686733", "CSAFPID-3686734", "CSAFPID-3686735", "CSAFPID-3686736", "CSAFPID-3686737", "CSAFPID-3686738", "CSAFPID-3686739", "CSAFPID-3686740", "CSAFPID-3686741", "CSAFPID-3686742", "CSAFPID-3686743", "CSAFPID-3686744", "CSAFPID-3686745", "CSAFPID-3686746", "CSAFPID-3686747", "CSAFPID-3686748", "CSAFPID-3686749", "CSAFPID-3686750", "CSAFPID-3686751", "CSAFPID-3686752", "CSAFPID-3686753", "CSAFPID-3686754", "CSAFPID-3686755", "CSAFPID-3686756", "CSAFPID-3686757", "CSAFPID-3686758", "CSAFPID-3686759", "CSAFPID-3686760", "CSAFPID-3686761", "CSAFPID-3686762", "CSAFPID-3686763", "CSAFPID-3686764", "CSAFPID-3686765", "CSAFPID-3686766", "CSAFPID-3686767", "CSAFPID-3686768", "CSAFPID-3686769", "CSAFPID-3686770", "CSAFPID-3686771" ] }, "references": [ { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27954" }, { "category": "external", "summary": "Source raw - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-27954" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27954" }, { "category": "external", "summary": "Source raw - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/27xxx/CVE-2026-27954.json" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-27954" }, { "category": "external", "summary": "Source raw - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-27954.json?alt=media" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://github.com/LiveHelperChat/livehelperchat/security/advisories/GHSA-87wc-2p86-h3w7" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27954.json" }, { "category": "external", "summary": "Reference - osv", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27954" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-3392537", "CSAFPID-3392538", "CSAFPID-3392539", "CSAFPID-3392540", "CSAFPID-3392541", "CSAFPID-3392542", "CSAFPID-3392543", "CSAFPID-3392544", "CSAFPID-3392545", "CSAFPID-3392546", "CSAFPID-3392547", "CSAFPID-3392548", "CSAFPID-3392549", "CSAFPID-3392550", "CSAFPID-3392551", "CSAFPID-3392552", "CSAFPID-3392553", "CSAFPID-3392554", "CSAFPID-3392555", "CSAFPID-3392556", "CSAFPID-3392557", "CSAFPID-3392558", "CSAFPID-3392559", "CSAFPID-3392560", "CSAFPID-3392561", "CSAFPID-3392562", "CSAFPID-3392563", "CSAFPID-3392564", "CSAFPID-3392565", "CSAFPID-3392566", "CSAFPID-3392567", "CSAFPID-3392568", "CSAFPID-3392569", "CSAFPID-3392570", "CSAFPID-3392571", "CSAFPID-3392572", "CSAFPID-3392573", "CSAFPID-3392574", "CSAFPID-3392575", "CSAFPID-3392576", "CSAFPID-3392577", "CSAFPID-3392578", "CSAFPID-3392579", "CSAFPID-3392580", "CSAFPID-3392581", "CSAFPID-3392582", "CSAFPID-3392583", "CSAFPID-3392584", "CSAFPID-3392585", "CSAFPID-3392586", "CSAFPID-3392587", "CSAFPID-3392588", "CSAFPID-3392589", "CSAFPID-3392590", "CSAFPID-3392591", "CSAFPID-3392592", "CSAFPID-3392593", "CSAFPID-3392594", "CSAFPID-3392595", "CSAFPID-3392596", "CSAFPID-3392597", "CSAFPID-3392598", "CSAFPID-3392599", "CSAFPID-3392600", "CSAFPID-3392601", "CSAFPID-3392602", "CSAFPID-3392603", "CSAFPID-3392604", "CSAFPID-3392605", "CSAFPID-3392606", "CSAFPID-3392607", "CSAFPID-3392608", "CSAFPID-3392609", "CSAFPID-3392610", "CSAFPID-3392611", "CSAFPID-3392612", "CSAFPID-3392613", "CSAFPID-3392614", "CSAFPID-3392615", "CSAFPID-3392616", "CSAFPID-3392617", "CSAFPID-3392618", "CSAFPID-3392619", "CSAFPID-3392620", "CSAFPID-3392621", "CSAFPID-3392622", "CSAFPID-3392623", "CSAFPID-3392624", "CSAFPID-3392625", "CSAFPID-3392626", "CSAFPID-3392627", "CSAFPID-3392628", "CSAFPID-3392629", "CSAFPID-3392630", "CSAFPID-3392631", "CSAFPID-3392632", "CSAFPID-3392633", "CSAFPID-3392634", "CSAFPID-3392635", "CSAFPID-3392636", "CSAFPID-3392637", "CSAFPID-3392638", "CSAFPID-3392639", "CSAFPID-3392640", "CSAFPID-3392641", "CSAFPID-3392642", "CSAFPID-3392643", "CSAFPID-3392644", "CSAFPID-3392645", "CSAFPID-3392646", "CSAFPID-3392647", "CSAFPID-3392648", "CSAFPID-3392649", "CSAFPID-3392650", "CSAFPID-3392651", "CSAFPID-3392652", "CSAFPID-3392653", "CSAFPID-3392654", "CSAFPID-3392655", "CSAFPID-3392656", "CSAFPID-3392657", "CSAFPID-3392658", "CSAFPID-3392659", "CSAFPID-3392660", "CSAFPID-3392661", "CSAFPID-3392662", "CSAFPID-3392663", "CSAFPID-3392664", "CSAFPID-3392665", "CSAFPID-3392666", "CSAFPID-3392667", "CSAFPID-3392668", "CSAFPID-3392669", "CSAFPID-3392670", "CSAFPID-3392671", "CSAFPID-3392672", "CSAFPID-3392673", "CSAFPID-3392674", "CSAFPID-3392675", "CSAFPID-3392676", "CSAFPID-3392677", "CSAFPID-3392678", "CSAFPID-3392679", "CSAFPID-3392680", "CSAFPID-3392681", "CSAFPID-3392682", "CSAFPID-3686662", "CSAFPID-3686663", "CSAFPID-3686664", "CSAFPID-3686665", "CSAFPID-3686666", "CSAFPID-3686667", "CSAFPID-3686668", "CSAFPID-3686669", "CSAFPID-3686670", "CSAFPID-3686671", "CSAFPID-3686672", "CSAFPID-3686673", "CSAFPID-3686674", "CSAFPID-3686675", "CSAFPID-3686676", "CSAFPID-3686677", "CSAFPID-3686678", "CSAFPID-3686679", "CSAFPID-3686680", "CSAFPID-3686681", "CSAFPID-3686682", "CSAFPID-3686683", "CSAFPID-3686684", "CSAFPID-3686685", "CSAFPID-3686686", "CSAFPID-3686687", "CSAFPID-3686688", "CSAFPID-3686689", "CSAFPID-3686690", "CSAFPID-3686691", "CSAFPID-3686692", "CSAFPID-3686693", "CSAFPID-3686694", "CSAFPID-3686695", "CSAFPID-3686696", "CSAFPID-3686697", "CSAFPID-3686698", "CSAFPID-3686699", "CSAFPID-3686700", "CSAFPID-3686701", "CSAFPID-3686702", "CSAFPID-3686703", "CSAFPID-3686704", "CSAFPID-3686705", "CSAFPID-3686706", "CSAFPID-3686707", "CSAFPID-3686708", "CSAFPID-3686709", "CSAFPID-3686710", "CSAFPID-3686711", "CSAFPID-3686712", "CSAFPID-3686713", "CSAFPID-3686714", "CSAFPID-3686715", "CSAFPID-3686716", "CSAFPID-3686717", "CSAFPID-3686718", "CSAFPID-3686719", "CSAFPID-3686720", "CSAFPID-3686721", "CSAFPID-3686722", "CSAFPID-3686723", "CSAFPID-3686724", "CSAFPID-3686725", "CSAFPID-3686726", "CSAFPID-3686727", "CSAFPID-3686728", "CSAFPID-3686729", "CSAFPID-3686730", "CSAFPID-3686731", "CSAFPID-3686732", "CSAFPID-3686733", "CSAFPID-3686734", "CSAFPID-3686735", "CSAFPID-3686736", "CSAFPID-3686737", "CSAFPID-3686738", "CSAFPID-3686739", "CSAFPID-3686740", "CSAFPID-3686741", "CSAFPID-3686742", "CSAFPID-3686743", "CSAFPID-3686744", "CSAFPID-3686745", "CSAFPID-3686746", "CSAFPID-3686747", "CSAFPID-3686748", "CSAFPID-3686749", "CSAFPID-3686750", "CSAFPID-3686751", "CSAFPID-3686752", "CSAFPID-3686753", "CSAFPID-3686754", "CSAFPID-3686755", "CSAFPID-3686756", "CSAFPID-3686757", "CSAFPID-3686758", "CSAFPID-3686759", "CSAFPID-3686760", "CSAFPID-3686761", "CSAFPID-3686762", "CSAFPID-3686763", "CSAFPID-3686764", "CSAFPID-3686765", "CSAFPID-3686766", "CSAFPID-3686767", "CSAFPID-3686768", "CSAFPID-3686769", "CSAFPID-3686770", "CSAFPID-3686771", "CSAFPID-5723465", "CSAFPID-5736893" ] } ], "title": "CVE-2026-27954" } ] }