Vulnerability · Published Sep 29, 2026 · Assigned by TR-CERT
CVE-2026-87748Privilege Escalation via Account Takeover in Interprobe's Qorela DC
High 8.8
In plain English
A high-severity missing authorization in Qorela DC from Interprobe Information Technologies Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.2%top 85.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Missing Authorization vulnerability in Interprobe Information Technologies Inc. Qorela DC allows Privilege Abuse. This issue affects Qorela DC: from 1.6.1-RC29 before v1.6.2.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Interprobe Information Technologies Inc. | Qorela DC | 1.6.1-RC29 – before v1.6.2 |
Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1209 government-resource