Lucene search
K

147 matches found

RedhatCVE
RedhatCVE
added 3 days ago5 views

CVE-2026-10550

A weakness has been identified in elunez eladmin up to 2.7. This vulnerability affects unknown code of the file App.java of the component Application Deployment Module. This manipulation of the argument uploadPath causes command injection. Remote exploitation of the attack is possible. The exploi...

6.5CVSS6.3AI score0.00924EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 3 days ago5 views

CVE-2026-8127

A vulnerability has been found in eladmin up to 2.7. Impacted is the function checkLevel of the file /rest/UserController.java of the component Users API Endpoint. Such manipulation leads to improper access controls. The attack can be executed remotely. The exploit has been disclosed to the publi...

6.5CVSS6AI score0.00038EPSS
Exploits0References1
NVD
NVD
added 6 days ago8 views

CVE-2026-10550

A weakness has been identified in elunez eladmin up to 2.7. This vulnerability affects unknown code of the file App.java of the component Application Deployment Module. This manipulation of the argument uploadPath causes command injection. Remote exploitation of the attack is possible. The exploi...

6.5CVSS0.00924EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 6 days ago5 views

CVE-2026-10550 elunez eladmin Application Deployment App.java command injection

A weakness has been identified in elunez eladmin up to 2.7. This vulnerability affects unknown code of the file App.java of the component Application Deployment Module. This manipulation of the argument uploadPath causes command injection. Remote exploitation of the attack is possible. The exploi...

6.5CVSS6.3AI score0.00924EPSS
Exploits0References6
EUVD
EUVD
added 6 days ago7 views

EUVD-2026-33857

A weakness has been identified in elunez eladmin up to 2.7. This vulnerability affects unknown code of the file App.java of the component Application Deployment Module. This manipulation of the argument uploadPath causes command injection. Remote exploitation of the attack is possible. The exploi...

6.5CVSS6.3AI score0.00924EPSS
Exploits0References6
CVE
CVE
added 6 days ago12 views

CVE-2026-10550

Summary of CVE-2026-10550 (elunez eladmin) : Affects eladmin up to 2.7; the vulnerability targets the Application Deployment Module, specifically the App.java component. The issue arises from manipulating the uploadPath argument, enabling command injection and remote code execution. Public exploi...

6.5CVSS6.3AI score0.00924EPSS
Exploits0References6
Cvelist
Cvelist
added 6 days ago34 views

CVE-2026-10550 elunez eladmin Application Deployment App.java command injection

A weakness has been identified in elunez eladmin up to 2.7. This vulnerability affects unknown code of the file App.java of the component Application Deployment Module. This manipulation of the argument uploadPath causes command injection. Remote exploitation of the attack is possible. The exploi...

6.5CVSS0.00924EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 6 days ago8 views

CVE-2026-10550

A weakness has been identified in elunez eladmin up to 2.7. This vulnerability affects unknown code of the file App.java of the component Application Deployment Module. This manipulation of the argument uploadPath causes command injection. Remote exploitation of the attack is possible. The exploi...

6.5CVSS6.3AI score0.00924EPSS
Exploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 6 days ago13 views

PT-2026-45678

A weakness has been identified in elunez eladmin up to 2.7. This vulnerability affects unknown code of the file App.java of the component Application Deployment Module. This manipulation of the argument uploadPath causes command injection. Remote exploitation of the attack is possible. The exploi...

6.5CVSS6.3AI score0.00924EPSS
Exploits0References7
NVD
NVD
added 2026/05/08 3:16 a.m.9 views

CVE-2026-8127

A vulnerability has been found in eladmin up to 2.7. Impacted is the function checkLevel of the file /rest/UserController.java of the component Users API Endpoint. Such manipulation leads to improper access controls. The attack can be executed remotely. The exploit has been disclosed to the publi...

6.5CVSS0.00038EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/05/08 2:0 a.m.25 views

CVE-2026-8127 eladmin Users API Endpoint UserController.java checkLevel access control

A vulnerability has been found in eladmin up to 2.7. Impacted is the function checkLevel of the file /rest/UserController.java of the component Users API Endpoint. Such manipulation leads to improper access controls. The attack can be executed remotely. The exploit has been disclosed to the publi...

6.5CVSS0.00038EPSS
Exploits0References4
CVE
CVE
added 2026/05/08 2:0 a.m.10 views

CVE-2026-8127

The CVE covers eladmin up to version 2.7, where the checkLevel function in /rest/UserController.java (Users API Endpoint) is susceptible. The issue allows remote manipulation that leads to improper access controls. Exploitation is possible remotely and has been disclosed publicly; the CVSS metric...

6.5CVSS6.1AI score0.00038EPSS
Exploits0References4
EUVD
EUVD
added 2026/05/08 2:0 a.m.7 views

EUVD-2026-28487

A vulnerability has been found in eladmin up to 2.7. Impacted is the function checkLevel of the file /rest/UserController.java of the component Users API Endpoint. Such manipulation leads to improper access controls. The attack can be executed remotely. The exploit has been disclosed to the publi...

6.5CVSS5.4AI score0.00038EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/08 2:0 a.m.4 views

CVE-2026-8127

A vulnerability has been found in eladmin up to 2.7. Impacted is the function checkLevel of the file /rest/UserController.java of the component Users API Endpoint. Such manipulation leads to improper access controls. The attack can be executed remotely. The exploit has been disclosed to the publi...

6.5CVSS6.1AI score0.00038EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/05/08 2:0 a.m.7 views

CVE-2026-8127 eladmin Users API Endpoint UserController.java checkLevel access control

A vulnerability has been found in eladmin up to 2.7. Impacted is the function checkLevel of the file /rest/UserController.java of the component Users API Endpoint. Such manipulation leads to improper access controls. The attack can be executed remotely. The exploit has been disclosed to the publi...

6.5CVSS6.1AI score0.00038EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/05/08 12:0 a.m.7 views

PT-2026-38643

Name of the Vulnerable Software and Affected Versions eladmin versions prior to 2.8 Description Improper access controls in the Users API Endpoint allow for remote attacks. The issue exists within the checkLevel function located in the /rest/UserController.java file. Recommendations As a temporar...

6.5CVSS6.6AI score0.00038EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2026/02/05 1:23 a.m.5 views

CVE-2025-70997

A vulnerability has been discovered in eladmin v2.7 and before. This vulnerability allows for an arbitrary user password reset under any user permission level...

8.1CVSS5.3AI score0.00016EPSS
Exploits1References1
OSV
OSV
added 2026/02/04 3:16 p.m.0 views

CVE-2025-70997

A vulnerability has been discovered in eladmin v2.7 and before. This vulnerability allows for an arbitrary user password reset under any user permission level...

6.5CVSS5.6AI score
Exploits0References2
NVD
NVD
added 2026/02/04 3:16 p.m.1 views

CVE-2025-70997

A vulnerability has been discovered in eladmin v2.7 and before. This vulnerability allows for an arbitrary user password reset under any user permission level...

8.1CVSS0.00016EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/02/04 12:0 a.m.2 views

CVE-2025-70997

A vulnerability has been discovered in eladmin v2.7 and before. This vulnerability allows for an arbitrary user password reset under any user permission level...

5.6AI score0.00016EPSS
Exploits1References2
Rows per page
Query Builder