CVE-2026-5228

Improper Access Control in Kurt Software Studio's WriteUp Mobile App

CVSS 8.8 HIGHEPSS 0.2%CWE-284 CWE-862

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.8EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

04 Jun 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Improper Access Control, Missing Authorization vulnerability in Kurt Software Studio WriteUp Mobile App allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WriteUp Mobile App: from 1.3.0 through 04062026.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Kurt Software Studio · WriteUp Mobile App

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0310