CVE-2026-108717

Combodo iTop versions 3.1.0 through 3.3.0 are affected by a missing authorization vulnerability in LinkSetController.php. This flaw allows authenticated console users to bypass profile grants by providing arbitrary class and key parameters. Exploitation enables attackers to access the linkset del...