CVE-2026-38470

CVE-2026-38470 is a broken access control vulnerability in the API user endpoint of GazellePW (GazellePosterWall) , specifically at commit 86c4bedf727691b5a97af42a4864869d18446449. An unprivileged, authenticated user holding a standard user-created API token can enable or disable arbitrary user a...