VULNERABILITY INTELLIGENCE
CVE-2026-8127
CVSS score6.3 MEDIUM
EPSS probability0.20%
CISA KEVNot currently listed
Published2026-05-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Description
A vulnerability has been found in eladmin up to 2.7. Impacted is the function checkLevel of the file /rest/UserController.java of the component Users API Endpoint. Such manipulation leads to improper access controls. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Weakness classification
- cna@vuldb.com: CWE-266