Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.3

Jordy Meow AI Engine Pro: Unauthorized Access to Configuration

CVE-2026-39506 · published 7 months ago
Summary

The Jordy Meow AI Engine Pro is not properly controlling who has access to its settings. This means that someone with the wrong settings in place can gain access to parts of the system they shouldn't have. To fix this, update to version 3.4.2 or later.

Original advisory text
Missing Authorization vulnerability in Jordy Meow AI Engine (Pro) ai-engine-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine (Pro): from n/a ...
Missing Authorization vulnerability in Jordy Meow AI Engine (Pro) ai-engine-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine (Pro): from n/a through < 3.4.2.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
4.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-862Missing Authorization
Timeline
Published8 Apr 2026
Updated26 Oct 2026
First seen8 Apr 2026
Sources
CVE-2026-39506 · NVD
Track software like this
Free during beta