VULNERABILITY INTELLIGENCE
CVE-2026-8046
CVSS score7.2 HIGH
EPSS probability0.35%
CISA KEVNot currently listed
Published2026-05-26
Last modified2026-07-23
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Description
The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged remote user can exploit this vulnerability to delete other users, including those with higher privileges.
Weakness classification
- CWE-863: Incorrect Authorization