CVE-2026-40802 pubjet CVE debrief

Who should care

Defenders responsible for managing Pubjet plugin installations and subscriber settings should assess exposure and potential impact.

Why it matters

Defenders should prioritize verifying exposure and assessing potential impact on subscriber settings due to a high-severity vulnerability in Pubjet plugin versions up to 5.4.8.

• Verification of Pubjet plugin version and subscriber settings exposure
• Potential unauthorized changes to subscriber settings by low-privileged attackers
• Assessment of impact on subscriber settings and potential data exposure

Technical summary

The Pubjet plugin up to version 5.4.8 has a vulnerability that allows a low-privileged attacker to change subscriber settings. The CVSS score is 7.6, indicating high severity.

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impact on subscriber settings.

Recommended defensive actions

• Verify Pubjet plugin version and update to a fixed version if available
• Assess exposure of subscriber settings to low-privileged attackers
• Monitor for potential unauthorized changes to subscriber settings

Evidence notes

The vulnerability was reported by Patchstack and recorded by NIST NVD. Evidence is limited to public sources and may not be comprehensive. Defenders should verify exposure and assess potential impact based on available information.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.