Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 0.3%	CVE-2026-108740GoatCounter · Improperly Controlled Modification of Dynamically-Determined Object Attributes High7.2EPSS 0.3%2026-10-11CVE Database V5CVE-2026-108740 GoatCounter versions up to 2.7.0 have a privilege escalation vulnerability in the userPrefSave handler. This flaw allows logged-in users with read-only access to modify protected account fields by sending specially crafted form-encoded requests. Specifically, attackers can escalate their privileges to superuser or admin by posting parameters that bypass read-only restrictions. EPSS 0.3%Vulnerability arp242 #ghsa-4f43-5hgr-4m7r	CVE Database V5	2026-10-11

Showing 1–1 of 1 result