CVE-2026-38474

GazellePW (GazellePosterWall), a media management application, contains a Broken Access Control vulnerability in its IP lock manager . At commit 86c4bedf, the endpoint tools.php?action=iplock does not properly validate that the authenticated user owns the target account, allowing any remote authe...