Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

AdAstraCrypto Donation Box Without Access Controls Allows Unauthorized Access

CVE-2026-39691 · published 7 months ago
Summary

The AdAstraCrypto Cryptocurrency Donation Box did not properly control access to its features, allowing unauthorized individuals to potentially exploit this security weakness. This affects the security of donations made through the box. To protect your donations, update the software to the latest version.

Original advisory text
Missing Authorization vulnerability in AdAstraCrypto Cryptocurrency Donation Box – Bitcoin & Crypto Donations cryptocurrency-donation-box allows Exploiting Incorrectly Configured Access Control Sec...
Missing Authorization vulnerability in AdAstraCrypto Cryptocurrency Donation Box – Bitcoin & Crypto Donations cryptocurrency-donation-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cryptocurrency Donation Box – Bitcoin & Crypto Donations: from n/a through <= 2.2.13.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
5.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-862Missing Authorization
Timeline
Published8 Apr 2026
Updated29 Oct 2026
First seen8 Apr 2026
Sources
CVE-2026-39691 · NVD
Track software like this
Free during beta