Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CVE-2026-15354
Mauro Cassani ACPT (Premium) — ACPT (Premium) <= 2.0.66 - Unauthenticated Privilege Escalation via 'acpt_form_post_id' Parameter
AV AC PR UI S C I A CVSS EPSS %ile KEV
N L N N U H H H 9.8 .0030 21.2 —
AFFECTED
Product Versions Fixed
ACPT (Premium) unspecified —
TIMELINE
Jul 10 Reserved by Wordfence
Sep 4 Published (CNA: Wordfence)
Oct 16 REJECTED — CVE-2026-15354 (Mauro Cassani ACPT (Premium)). Record withdrawn by the CNA.
Description
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-32566. Reason: This candidate is a reservation duplicate of CVE-2026-32566 Notes: All CVE users should reference CVE-2026-32566 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
|---|
| July 10, 2026 | Reserved | Reserved by Wordfence |
| September 4, 2026 | Published | Published (CNA: Wordfence) |
| October 16, 2026 | REJECTED | REJECTED — CVE-2026-15354 (Mauro Cassani ACPT (Premium)). Record withdrawn by the CNA. |
Affected
Affected products and packages — 1 row
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|
| Mauro Cassani | ACPT (Premium) | — | — | — |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-15354 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Monday, October 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
