Security Advisory

CVE-2026-38934

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-04-27 00:00:00
Last updated 2026-04-27 17:48:28
Assigner mitre
State PUBLISHED

Description

Cross Site Request Forgery vulnerability in diskoverdata diskover-community v.2.3.5. and before allows a remote attacker to escalate privileges and obtain sensitive information via the public/settings_process.php