2 matches found
CVE-2026-18972
An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header "Grpc-Metadata-USER". This can lead to an account takeover attack from a user with low privileges to administrator...
9.6CVSS
SaveExploits0References1
CVE-2026-18972
An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header "Grpc-Metadata-USER". This can lead to an account takeover attack from a user with low privileges to administrator...
9.6CVSS5.2AI score
SaveExploits0References2
20