VULNERABILITY INTELLIGENCE

CVE-2026-23595

CVSS score8.8 HIGH
EPSS probability0.33%
CISA KEVNot currently listed
Published2026-02-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An authentication bypass in the application API allows an unauthorized administrative account to be created. A remote attacker could exploit this vulnerability to create privileged user accounts. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-284

Primary references