Back to the CVE list

CVE-2026-54683

NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user until 3.0.3 (incomplete fix of CVE-2026-49463)

CVSS score

6.5

EPSS probability

%0.3

Risk score

0.0

Published

4 d ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

8.1

CVE-2026-49464NL Portal: IDOR allows any authenticated user to complete and tamper with another user's taak

Vendornl-portal Productnl-portal-backend-libraries+2 etkilenen

Patch verifiedEPSS %01 mo ago

5.3

CVE-2026-55414NL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF)

Vendornl-portal Productnl-portal-backend-libraries

Patch status unknownEPSS %04 d ago

6.5

CVE-2026-49463NL Portal: Missing per-user authorization on document and decision GraphQL queries in nl-portal-backend-libraries

Vendornl-portal Productnl.nl-portal:besluiten+3 etkilenen

Patch verifiedEPSS %01 mo ago

5.3

CVE-2026-49462nl.nl-portal:app has GraphiQL UI and GraphQL schema introspection enabled by default

Vendornl-portal Productnl.nl-portal:app

Patch status unknownEPSS %01 mo ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-54683"