Threats tagged 'ghsa-2wv9-fhg5-594v'

CVE-2026-59504 is a critical vulnerability classified under CWE-602, involving client-side enforcement of security controls that should be enforced server-side. This flaw allows an attacker to bypass intended server-side security mechanisms by manipulating client-side controls. The vulnerability has a CVSS 3.1 score of 9.1, indicating high impact on confidentiality and integrity without requiring privileges or user interaction. No affected software versions or vendor patches are currently specified. There are no known exploits in the wild at this time.