Description

An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account.

Remediation

References

CVE-2026-6915

Related Vulnerabilities

WordPress Plugin File Manager Advanced Shortcode Arbitrary File Upload (2.5.3)

Python Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2026-0864)

MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-34502)

Oracle Database Server CVE-2015-2629 Vulnerability (CVE-2015-2629)

Dotclear Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-5083)

Severity

Medium

Classification

CVE-2026-6915 CWE-1284 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities