3 matches found
CVE-2026-18972
An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header "Grpc-Metadata-USER". This can lead to an account takeover attack from a user with low privileges to administrator...
9.6CVSS0.06059EPSS
SaveExploits0References1
CVE-2026-18972
An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header "Grpc-Metadata-USER". This can lead to an account takeover attack from a user with low privileges to administrator...
9.6CVSS5.2AI score0.06059EPSS
SaveExploits0References2
PT-2026-70179
An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header "Grpc-Metadata-USER". This can lead to an account takeover attack from a user with low privileges to administrator...
9.6CVSS5.2AI score0.06059EPSS
SaveExploits0References2
20