CVE-2026-71252

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-71252", "assignerOrgId": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "state": "PUBLISHED", "assignerShortName": "TuranSec", "dateReserved": "2026-08-05T10:53:53.177Z", "datePublished": "2026-08-05T10:57:14.416Z", "dateUpdated": "2026-08-10T11:46:11.927Z"}, "containers": {"cna": {"title": "toner-management - Unauthenticated State-Changing Admin Actions", "descriptions": [{"lang": "en", "value": "toner-management's admin state-changing handlers (add.php, edit.php, delete.php under admin/toners, admin/toner-brands, admin/printers, and related admin subdirectories) executed INSERT/UPDATE/DELETE database operations with no authentication or authorization check, while access control was enforced only in listing views.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>toner-management's admin state-changing handlers (add.php, edit.php, delete.php under admin/toners, admin/toner-brands, admin/printers, and related admin subdirectories) executed INSERT/UPDATE/DELETE database operations with no authentication or authorization check, while access control was enforced only in listing views.</p>"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-862 Missing Authorization", "cweId": "CWE-862", "type": "CWE"}]}], "affected": [{"vendor": "raghav993", "product": "toner-management", "programFiles": ["admin/toners/delete.php", "admin/toner-brands/delete.php", "admin/printers/delete_printer.php"], "versions": [{"version": "0", "status": "affected"}, {"version": "fixed", "status": "unaffected"}], "defaultStatus": "unknown"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L", "baseScore": 8.2, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "LOW"}}], "references": [{"url": "https://github.com/raghav993/toner-management", "tags": ["third-party-advisory"]}, {"url": "https://github.com/raghav993/toner-management/pull/1", "tags": ["third-party-advisory"]}], "credits": [{"lang": "en", "value": "Javokhir Tursunboyev", "type": "finder"}], "providerMetadata": {"orgId": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "shortName": "TuranSec", "dateUpdated": "2026-08-10T11:46:11.927Z"}, "source": {"discovery": "EXTERNAL"}, "datePublic": "2026-08-05T10:57:14.416Z"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-05T12:38:53.671621Z", "id": "CVE-2026-71252", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-05T12:39:13.063Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-71252", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-05T12:38:53.671621Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-05T12:39:06.587Z"}}], "cna": {"title": "toner-management - Unauthenticated State-Changing Admin Actions", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Javokhir Tursunboyev"}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "raghav993", "product": "toner-management", "versions": [{"status": "affected", "version": "0"}, {"status": "unaffected", "version": "fixed"}], "programFiles": ["admin/toners/delete.php", "admin/toner-brands/delete.php", "admin/printers/delete_printer.php"], "defaultStatus": "unknown"}], "datePublic": "2026-08-05T10:57:14.416Z", "references": [{"url": "https://github.com/raghav993/toner-management", "tags": ["third-party-advisory"]}, {"url": "https://github.com/raghav993/toner-management/pull/1", "tags": ["third-party-advisory"]}], "descriptions": [{"lang": "en", "value": "toner-management's admin state-changing handlers (add.php, edit.php, delete.php under admin/toners, admin/toner-brands, admin/printers, and related admin subdirectories) executed INSERT/UPDATE/DELETE database operations with no authentication or authorization check, while access control was enforced only in listing views.", "supportingMedia": [{"type": "text/html", "value": "<p>toner-management's admin state-changing handlers (add.php, edit.php, delete.php under admin/toners, admin/toner-brands, admin/printers, and related admin subdirectories) executed INSERT/UPDATE/DELETE database operations with no authentication or authorization check, while access control was enforced only in listing views.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "CWE-862 Missing Authorization"}]}], "providerMetadata": {"orgId": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "shortName": "TuranSec", "dateUpdated": "2026-08-10T11:46:11.927Z"}}}, "cveMetadata": {"cveId": "CVE-2026-71252", "state": "PUBLISHED", "dateUpdated": "2026-08-10T11:46:11.927Z", "dateReserved": "2026-08-05T10:53:53.177Z", "assignerOrgId": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "datePublished": "2026-08-05T10:57:14.416Z", "assignerShortName": "TuranSec"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "toner-management", "programFiles": ["admin/toners/delete.php", "admin/toner-brands/delete.php", "admin/printers/delete_printer.php"], "vendor": "raghav993", "versions": [{"status": "affected", "version": "0"}, {"status": "unaffected", "version": "fixed"}]}], "source": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "toner-management's admin state-changing handlers (add.php, edit.php, delete.php under admin/toners, admin/toner-brands, admin/printers, and related admin subdirectories) executed INSERT/UPDATE/DELETE database operations with no authentication or authorization check, while access control was enforced only in listing views."}, {"lang": "es", "value": "Los gestores de cambio de estado de administrador de toner-management (add.php, edit.php, delete.php bajo admin/toners, admin/toner-brands, admin/printers, y subdirectorios de administrador relacionados) ejecutaron operaciones de base de datos INSERT/UPDATE/DELETE sin verificaci\u00f3n de autenticaci\u00f3n ni autorizaci\u00f3n, mientras que el control de acceso se aplicaba solo en las vistas de listado. Un atacante remoto no autenticado podr\u00eda invocar estos gestores directamente para crear, modificar o destruir datos de la aplicaci\u00f3n. El proveedor ha incorporado desde entonces una correcci\u00f3n que requiere una sesi\u00f3n de administrador autenticada antes de que cualquiera de dichos gestores proceda."}], "id": "CVE-2026-71252", "lastModified": "2026-10-24T15:10:00.190", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 4.2, "source": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-71252", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-05T12:38:53.671621Z", "version": "2.0.3"}}]}, "published": "2026-08-05T11:16:28.383", "references": [{"source": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "url": "https://github.com/raghav993/toner-management"}, {"source": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "url": "https://github.com/raghav993/toner-management/pull/1"}], "sourceIdentifier": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "0"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "fixed"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "toner-management", "source": "cna", "vendor": "raghav993"}, "product": "toner-management", "vendor": "raghav993"}], "created": "2026-08-05T12:30:12.416348+00:00", "updated": "2026-08-10T22:00:05.257331+00:00", "vendors": ["raghav993", "raghav993$PRODUCT$toner-management"]}