CVE-2026-119646

The Open Web Analytics software before version 1.14.1 contains an authorization vulnerability in its REST Report API . The root cause is that clickstream and transaction reports are not properly scoped to the authorized siteId . Consequently, an authenticated user with view_reports permissions on...