CVE-2026-18972

creationtimestamp| type| source ---|---|--- 2026-08-11 13:30:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/117077117025006386 2026-08-11 13:30:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msspwvfmu422 2026-08-11 13:40:04+00:00| seen|...

CVE-2026-18972

An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header "Grpc-Metadata-USER". This can lead to an account takeover attack from a user with low privileges to administrator...

CVE-2026-18972

An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header "Grpc-Metadata-USER". This can lead to an account takeover attack from a user with low privileges to administrator...