Threats tagged 'ghsa-xpch-grqf-pgpq'

CVE-2026-65507 is a critical vulnerability in Sergey AIWU versions up to and including 1.5.6 that allows unauthenticated privilege escalation due to incorrect privilege assignment (CWE-266). This flaw enables an attacker with no prior authentication to gain elevated privileges, potentially leading to full system compromise. The vulnerability has a CVSS v3.1 score of 9.8, indicating high impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.