CVE-2026-66676

Unauthenticated Broken Access Control in Easy Invoice <= 2.3.8 versions.

Published Sep 17, 2026
CVSS 5.3 medium
0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

MatrixAddons Easy Invoice

CVE-2026-66676 at the National Vulnerability Database