CVE-2026-23487: Incorrect Target Role Authorization Bypasscve-2026-23487-incorrect-target-role-authorization-bypass
The authorization logic incorrectly checks the role of the requested target (e.g., user record) instead of the current authenticated session context. This can lead to an IDOR (Authorization Bypass) where unprivileged users can access privileged records by requesting them. Ensure that the authorization condition verifies the role of the current requesting use
