2 matches found
CVE-2026-14953
A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated privileges using the endpoint /api/user/fetch-all.php...
5.3CVSS0.00329EPSS
SaveExploits0References1
CVE-2026-14953: Direct Request
A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated privileges using the endpoint /api/user/fetch-all.php...
5.3CVSS5.8AI score0.00329EPSS
SaveExploits0References2
20