Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:10 p.m.5 views

CVE-2026-8077

Lack of proper authorization implementation in the CashDro 3 web administration panel, version 24.01.00.26. The backend lacks authorization controls, leaving security entirely to the frontend. By modifying the binary string in the ‘Permissions’ field of the JSON response, an attacker could escala...

8.6CVSS5.4AI score0.00041EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/08 3:31 p.m.7 views

EUVD-2026-28591

Lack of proper authorization implementation in the CashDro 3 web administration panel, version 24.01.00.26. The backend lacks authorization controls, leaving security entirely to the frontend. By modifying the binary string in the ‘Permissions’ field of the JSON response, an attacker could escala...

8.6CVSS5.8AI score0.00041EPSS
Exploits0References3
NVD
NVD
added 2026/05/08 1:16 p.m.7 views

CVE-2026-8077

Lack of proper authorization implementation in the CashDro 3 web administration panel, version 24.01.00.26. The backend lacks authorization controls, leaving security entirely to the frontend. By modifying the binary string in the ‘Permissions’ field of the JSON response, an attacker could escala...

8.6CVSS0.00041EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/05/08 12:12 p.m.8 views

CVE-2026-8077 Weak credentials vulnerability in the CashDro 3 web administration panel

Lack of proper authorization implementation in the CashDro 3 web administration panel, version 24.01.00.26. The backend lacks authorization controls, leaving security entirely to the frontend. By modifying the binary string in the ‘Permissions’ field of the JSON response, an attacker could escala...

8.6CVSS5.8AI score0.00041EPSS
Exploits0References2
CVE
CVE
added 2026/05/08 12:12 p.m.15 views

CVE-2026-8077

CVE-2026-8077 concerns the CashDro 3 web administration panel (v24.01.00.26). The issue is a lack of proper authorization in the backend, with security effectively handled only on the frontend. By altering the binary string in the ‘Permissions’ field of the JSON response, an attacker could escala...

8.6CVSS5.8AI score0.00041EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/08 12:12 p.m.26 views

CVE-2026-8077 Weak credentials vulnerability in the CashDro 3 web administration panel

Lack of proper authorization implementation in the CashDro 3 web administration panel, version 24.01.00.26. The backend lacks authorization controls, leaving security entirely to the frontend. By modifying the binary string in the ‘Permissions’ field of the JSON response, an attacker could escala...

8.6CVSS0.00041EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/05/08 12:0 a.m.4 views

CashDro 安全漏洞

CashDro is an intelligent device system developed by CashDro Corporation, designed for automated management of cash receipts and change dispensing at stores. Version 3.24.01.00.26 of CashDro contains a security vulnerability. This vulnerability stems from the lack of authorization control in the...

8.6CVSS5.8AI score0.00041EPSS
Exploits0References1
Rows per page
Query Builder