CVE-2007-0873: nabopoll 1.1.2 allows remote attackers to bypass authentication and access certain administrative functiona...

Security readout for executives and security teams

CVE-2007-0873 is an old nabopoll 1.1.2 authentication bypass. A remote user could directly reach certain administrative pages without logging in, potentially changing configuration, templates, or surveys. The sources do not identify a vendor patch or current maintainer guidance. Exposure is most likely in legacy nabopoll 1.1.2 installations where the admin directory remains reachable from the internet or internal users. Modern environments are only affected if they still host this application or copied code. Treat exposed instances as urgent legacy-risk cleanup. The issue enables administrative access without credentials, but impact depends on whether nabopoll 1.1.2 is still deployed and reachable. Mitigation focus: Identify and retire any remaining nabopoll 1.1.2 deployments.; Restrict admin paths behind VPN, IP allowlisting, or server-level authentication.; Check vendor or community guidance for any fixed release..

Prepared

Jun 29, 2026, 07:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.