Threats tagged 'ghsa-62g2-q3w2-xf47'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.6	EPSS 0.4%	CVE-2026-18972 · An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header \"Grpc-Metadata-USER\" Critical9.6EPSS 0.4%2026-08-11GCVE Database CVE-2026-18972 is a critical vulnerability where an authenticated attacker can impersonate another GUI user by sending requests with a custom header "Grpc-Metadata-USER". This flaw allows privilege escalation from a low-privileged user to an administrator, enabling account takeover. EPSS 0.4%Report on CVE-2026-18972 Vulnerability CWE-290 #ghsa-62g2-q3w2-xf47	GCVE Database	2026-08-11

Page 1 of 1