Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.3

Cookiebot Cookiebot: Unauthorized Access to Sensitive Data

CVE-2026-25407
Summary

Cookiebot Cookiebot has a security issue that allows unauthorized access to sensitive data. This affects Cookiebot versions 4.6.4 and earlier. To fix this, update to the latest version of Cookiebot.

Original title
Missing Authorization vulnerability in cookiebot Cookiebot cookiebot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cookiebot: from n/a through <= 4.6.4.
Original description
Missing Authorization vulnerability in cookiebot Cookiebot cookiebot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cookiebot: from n/a through <= 4.6.4.
nvd CVSS3.1 4.3
Vulnerability type
CWE-862 Missing Authorization
Published: 19 Feb 2026 · Updated: 11 Mar 2026 · First seen: 6 Mar 2026