CVE ID :CVE-2026-109119
Published : Oct. 16, 2026, 11:17 a.m. | 32 minutes ago
Description :Improper Privilege Management in the user management API endpoint (/api/users/{username_or_id}) in Rdiffweb allows authenticated users to elevate their privileges to administrator by modifying the role parameter in a POST request.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-109119 - Missing Authorization in rdiffweb
CVE ID :CVE-2026-109119 Published : Oct. 16, 2026, 11:17 a.m. | 32 minutes ago Description :Improper Privilege Management in the user management API endpoint (/api/users/{username_or_id}) in Rdiffweb allows authenticated users to elevate their privileges to administrator by modifying the role parameter in a POST request. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...