Security Advisory

CVE-2026-5652

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-21 16:33:56

Last updated 2026-04-21 17:22:27

Assigner GitLab

CVSS score 9.0

State PUBLISHED

Description

An insecure direct object reference vulnerability in the Users API component of Crafty Controller allows a remote, authenticated attacker to perform user modification actions via improper API permissions validation.

← Browse all CVEs View on cve.org ↗