EUVD-2026-80705

zlt2000 microservices-platform through 6.0.0 contains an unverified password change vulnerability in the PUT /users/password endpoint that allows authenticated users to change any account password by omitting the current password check. Attackers can supply an arbitrary user id in the request bod...

CVE-2026-92467 microservices-platform through 6.0.0 Unverified Password Change via /users/password

zlt2000 microservices-platform through 6.0.0 contains an unverified password change vulnerability in the PUT /users/password endpoint that allows authenticated users to change any account password by omitting the current password check. Attackers can supply an arbitrary user id in the request bod...

CVE-2026-92467: Unverified Password Change

zlt2000 microservices-platform through 6.0.0 contains an unverified password change vulnerability in the PUT /users/password endpoint that allows authenticated users to change any account password by omitting the current password check. Attackers can supply an arbitrary user id in the request bod...

PT-2026-93733

Name of the Vulnerable Software and Affected Versions zlt2000 microservices-platform versions prior to 6.0.1 Description An unverified password change issue exists in the 'PUT /users/password' endpoint. Authenticated users can change the password of any non-administrator account by omitting the...