Search vulnerabilities

Results 1

Export CSV
CVE-2026-109849

hinemos: Hinemos: Privilege escalation via password change API

Incorrect privilege assignment issue exists in Hinemos. If this vulnerability is exploited, an attacker who can access the password change API with specific permissions that can be assigned to non-administrative users may change the password of an administrative user.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Products