PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-104403 ThimPress CVE debrief

CVE-2026-104403 is an Authorization Bypass Through User-Controlled Key vulnerability in ThimPress LearnPress. The issue affects LearnPress from n/a through 4.4.9. The CVSS score is 5.3, and the severity is MEDIUM. This vulnerability allows exploiting incorrectly configured access control security levels. Defenders responsible for LearnPress installations should assess exposure and prioritize verification of LearnPress configurations and access control settings. They should verify configurations to prevent potential authorization bypass, update LearnPress to a fixed version if available, and monitor usage and logs for potential exploitation attempts.

Vendor
ThimPress
Product
LearnPress
CVSS
MEDIUM 5.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-02
Original CVE updated
2026-10-03
Advisory published
2026-10-02
Advisory updated
2026-10-03

Who should care

Defenders responsible for LearnPress installations should assess exposure and prioritize verification of LearnPress configurations and access control settings.

Why it matters

CVE-2026-104403 is a medium-severity vulnerability in LearnPress that allows authorization bypass through user-controlled keys. Defenders should verify LearnPress configurations, update to a fixed version if available, and monitor usage and logs.

  • Verify LearnPress configurations to prevent potential authorization bypass.
  • Update LearnPress to a fixed version to address the vulnerability.
  • Monitor LearnPress usage and logs for potential exploitation attempts.

Technical summary

CVE-2026-104403 is an Authorization Bypass Through User-Controlled Key vulnerability in ThimPress LearnPress, affecting versions from n/a through 4.4.9. The vulnerability allows exploiting incorrectly configured access control security levels. This issue has a CVSS score of 5.3 and a severity of MEDIUM. Defenders should prioritize verifying LearnPress configurations and updating to a fixed version if available. They should also monitor LearnPress usage and logs for potential exploitation attempts and review LearnPress configurations to prevent potential bypass.

Defensive priority

Defenders should prioritize verifying LearnPress configurations and updating to a fixed version if available.

Recommended defensive actions

  • Verify LearnPress configurations and access control settings.
  • Update LearnPress to a fixed version if available.
  • Monitor LearnPress usage and logs for potential exploitation attempts.

Evidence notes

The CVE record and NVD entry provide details about the vulnerability. However, the scope of affected versions and potential impact require further verification.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-104403 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-104403

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-104403 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-104403

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.