# Civilian Board of Contract Appeals (CBCA) vulnerabilities

Source: https://junglewise.ai/threats/vendors/civilian-board-of-contract-appeals-cbca  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/vendors/civilian-board-of-contract-appeals-cbca.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 4 vulnerabilities in Civilian Board of Contract Appeals (CBCA): 0 in the last 7 days and 0 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-54106, was published on 18 June 2026. 1 technology has a page of its own.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 0
- All time: 4 (1 critical, 0 exploited in the wild)

## About Civilian Board of Contract Appeals (CBCA)

The Civilian Board of Contract Appeals (CBCA) is an independent tribunal within the U.S. General Services Administration that hears contract disputes involving executive agencies.

## Latest Civilian Board of Contract Appeals (CBCA) vulnerabilities

- [CVE-2026-54106: GAO and CBCA Docketing Systems network access control bypass](https://junglewise.ai/threats/cve-2026-54106-gao-and-cbca-docketing-systems-network-access-control-bypass) (medium, CVSS 4.7, published 18 Jun 2026)
- [CVE-2026-54105: GAO and CBCA Docketing Systems IDOR in update-profile API](https://junglewise.ai/threats/cve-2026-54105-gao-and-cbca-docketing-systems-idor-in-update-profile-api) (medium, CVSS 5.3, published 18 Jun 2026)
- [CVE-2026-54104: GAO and CBCA Electronic Docketing Systems privilege escalation](https://junglewise.ai/threats/cve-2026-54104-gao-and-cbca-electronic-docketing-systems-privilege-escalation) (high, CVSS 8.8, published 18 Jun 2026)
- [CVE-2026-54103: GAO and CBCA Docketing Systems authentication bypass in password reset API](https://junglewise.ai/threats/cve-2026-54103-gao-and-cbca-docketing-systems-authentication-bypass-in-password) (critical, CVSS 9.8, published 18 Jun 2026)

## Most severe Civilian Board of Contract Appeals (CBCA) vulnerabilities

- [CVE-2026-54103: GAO and CBCA Docketing Systems authentication bypass in password reset API](https://junglewise.ai/threats/cve-2026-54103-gao-and-cbca-docketing-systems-authentication-bypass-in-password) (critical, CVSS 9.8, published 18 Jun 2026)
- [CVE-2026-54104: GAO and CBCA Electronic Docketing Systems privilege escalation](https://junglewise.ai/threats/cve-2026-54104-gao-and-cbca-electronic-docketing-systems-privilege-escalation) (high, CVSS 8.8, published 18 Jun 2026)
- [CVE-2026-54105: GAO and CBCA Docketing Systems IDOR in update-profile API](https://junglewise.ai/threats/cve-2026-54105-gao-and-cbca-docketing-systems-idor-in-update-profile-api) (medium, CVSS 5.3, published 18 Jun 2026)
- [CVE-2026-54106: GAO and CBCA Docketing Systems network access control bypass](https://junglewise.ai/threats/cve-2026-54106-gao-and-cbca-docketing-systems-network-access-control-bypass) (medium, CVSS 4.7, published 18 Jun 2026)

## Vulnerabilities per week

Nothing was published in the last eight weeks.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Civilian Board of Contract Appeals (CBCA) technologies

- [Civilian Board of Contract Appeals (CBCA) Electronic Docketing System](https://junglewise.ai/threats/technologies/electronic-docketing-system-eds): 4 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Civilian Board of Contract Appeals (CBCA) vulnerabilities", https://junglewise.ai/threats/vendors/civilian-board-of-contract-appeals-cbca, 9 November 2026.