EUVD-2026-9362

🗓️ 04 Mar 2026 09:31:06Reported by EUVDType

Pepr exposes an overly permissive cluster role when in admin mode.

Reporter	Title	Published	Views	Family All 157
ATTACKERKB	CVE-2026-23632	6 Feb 202617:43	–	attackerkb
ATTACKERKB	CVE-2026-2363	4 Mar 202606:26	–	attackerkb
ATTACKERKB	CVE-2026-3076	3 Mar 202622:31	–	attackerkb
ATTACKERKB	CVE-2026-23634	16 Jan 202619:14	–	attackerkb
ATTACKERKB	CVE-2026-23633	6 Feb 202617:46	–	attackerkb
Circl	CVE-2026-2363	4 Mar 202600:12	–	circl
Circl	CVE-2026-23634	16 Jan 202623:18	–	circl
CNNVD	Pepr security vulnerabilities	16 Jan 202600:00	–	cnnvd
CNNVD	Gogs 路径遍历漏洞	6 Feb 202600:00	–	cnnvd
CNNVD	Gogs 安全漏洞	6 Feb 202600:00	–	cnnvd

[
  {
    "enisaIdVendor": [
      {
        "id": "91e2932f-febe-34ba-b397-b69ee053452a",
        "vendor": {
          "name": "cbutlerjr"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "ec00feb7-a7d9-36a1-8d06-a690b9906a68",
        "product": {
          "name": "WP-Members Membership Plugin"
        },
        "product_version": "* ≤3.5.5.1"
      }
    ]
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/2a47e3cc-9435-4e9c-8d9a-9eb5014d229f
plugins	www.plugins.trac.wordpress.org/browser/wp-members/tags/3.5.5.1/includes/class-wp-members-products.php
plugins	www.plugins.trac.wordpress.org/browser/wp-members/tags/3.5.5.1/includes/class-wp-members-products.php
plugins	www.plugins.trac.wordpress.org/changeset/3468716/wp-members/trunk/includes/class-wp-members-products.php
github	www.github.com/gogs/gogs/security/advisories/GHSA-5qhx-gwfj-6jqr
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-23632
github	www.github.com/gogs/gogs/pull/8102/commits/b6afcdb2e8d291e2adaaf6a8b7f88d240606515d
github	www.github.com/gogs/gogs/releases/tag/v0.13.4
github	www.github.com/gogs/gogs/security/advisories/GHSA-mrph-w4hh-gx3g
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-23633

04 Mar 2026 09:31Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.14.3 - 6.5

EPSS0.00456

SSVC