https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 14:59:14 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-103903 <p>An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote authenticated attacker with credentials for a low-privilege account permitted to use WinBox to obtain the authorization policy of a different existing account. The stage-one EC-SRP challenge and proof are verified using the attacker&#39;s account, while the independently supplied stage-two username is used to install the target account&#39;s privileges. By specifying a higher-privilege account such as admin, a low-privilege user can obtain a full administrative session without knowing the target account&#39;s password and can use that session to increase the privileges of the attacker&#39;s own account.</p> <p>An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote authenticated attacker with credentials for a low-privilege account permitted to use WinBox to obtain the authorization policy of a different existing account. The stage-one EC-SRP challenge and proof are verified using the attacker&#39;s account, while the independently supplied stage-two username is used to install the target account&#39;s privileges. By specifying a higher-privilege account such as admin, a low-privilege user can obtain a full administrative session without knowing the target account&#39;s password and can use that session to increase the privileges of the attacker&#39;s own account.</p> https://db.gcve.eu/vuln/fkie_cve-2026-103903 https://db.gcve.eu/vuln/ghsa-23wm-v672-9cvc <p>An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote authenticated attacker with credentials for a low-privilege account permitted to use WinBox to obtain the authorization policy of a different existing account. The stage-one EC-SRP challenge and proof are verified using the attacker&#39;s account, while the independently supplied stage-two username is used to install the target account&#39;s privileges. By specifying a higher-privilege account such as admin, a low-privilege user can obtain a full administrative session without knowing the target account&#39;s password and can use that session to increase the privileges of the attacker&#39;s own account.</p> <p>An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote authenticated attacker with credentials for a low-privilege account permitted to use WinBox to obtain the authorization policy of a different existing account. The stage-one EC-SRP challenge and proof are verified using the attacker&#39;s account, while the independently supplied stage-two username is used to install the target account&#39;s privileges. By specifying a higher-privilege account such as admin, a low-privilege user can obtain a full administrative session without knowing the target account&#39;s password and can use that session to increase the privileges of the attacker&#39;s own account.</p> https://db.gcve.eu/vuln/ghsa-23wm-v672-9cvc