https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 07:00:43 +0000 https://db.gcve.eu/vuln/cve-2026-111366 <p><strong>Affected:</strong> cool-team-official cool-admin-midway</p> <p>cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to manage users outside their departments by supplying arbitrary user ids. Attackers holding sys:user:* permissions can call /admin/sys/user/info, update, or delete to read records, reset passwords and roles, or delete accounts.</p> <p><strong>Affected:</strong> cool-team-official cool-admin-midway</p> <p>cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to manage users outside their departments by supplying arbitrary user ids. Attackers holding sys:user:* permissions can call /admin/sys/user/info, update, or delete to read records, reset passwords and roles, or delete accounts.</p> https://db.gcve.eu/vuln/cve-2026-111366