CVE-2026-110372

Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40.

• Severity: Critical
• CVSS 9.8
• EPSS 0.27%
• Weaponized (Metasploit/Nuclei)
• P1 · Patch now

Why P1: Metasploit/Nuclei can already hit it.

Description

Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40.

Weakness

• CWE-266

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

• NVD record NVD
• CVE Program record CVE Program
• Reference NVD
• GitHub security advisory GitHub

Published 2026-10-18 · updated 2026-10-19 · sources: NVD, GitHub Advisory Database