CVE-2026-100514

Unauthenticated Insecure Direct Object References (IDOR) in REST API Log <= 1.7.2 versions.

Published Oct 1, 2026
CVSS 7.5 high
0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

Pete Nelson REST API Log

CVE-2026-100514 at the National Vulnerability Database