Back to CVE List

CVE-2026-2543

LOW SEVERITY

CVSS Score & Metrics

Base Score
2.7 / 10
Vector String
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Vulnerability Description

A vulnerability was identified in vichan-devel vichan up to 5.1.5. This vulnerability affects unknown code of the file inc/mod/pages.php of the component Password Change Handler. The manipulation of the argument Password leads to unverified password change. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Vulnerability Details

Published Date
Last Modified
CWE ID
CWE-620
Source
NVD

External References

Discussion (0)

Add Comment

No comments yet. Be the first!