Security Advisory

CVE-2026-85212

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-03 14:12:23

Last updated 2026-09-03 17:23:19

Assigner VulnCheck

CVSS score 8.7

State PUBLISHED

Description

CRMEB contains an authentication bypass vulnerability in the verifyAuth() method of SystemRoleServices.php that returns true from both conditional branches. Sub-administrators and accounts with no roles can access restricted admin endpoints by exploiting the inert role check that always permits requests.

← Browse all CVEs View on cve.org ↗