← Back to Dashboard

CVE-2026-109119

HIGH NVD
CVSS Score
8.8
Severity
HIGH
Source
NVD
Published
Oct 16, 2026
Description

Improper Privilege Management in the user management API endpoint (/api/users/{username_or_id}) in Rdiffweb allows authenticated users to elevate their privileges to administrator by modifying the role parameter in a POST request.

View Full Details ← Back