Back to CVE List

CVE-2026-12673

Vulnerability Description

Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalation from an Admin in a secondary domain to a Sysadmin by modifying a group in their managed secondary (non-default) group.

Vulnerability Details

Published Date
Last Modified
CWE ID
CWE-285
Source
NVD
Vendor
liquidfiles
Product
liquidfiles

External References

Discussion (0)

Add Comment

No comments yet. Be the first!