CVE-2026-57518

Pagekit CMS 1.0.18 contains a privilege escalation vulnerability that allows authenticated users with the 'user: manage users' permission to escalate privileges by assigning arbitrary custom roles to themselves due to missing authorization checks in UserApiController::saveAction. Attackers can...

CVE-2026-57518: Missing Authorization

Pagekit CMS 1.0.18 contains a privilege escalation vulnerability that allows authenticated users with the 'user: manage users' permission to escalate privileges by assigning arbitrary custom roles to themselves due to missing authorization checks in UserApiController::saveAction. Attackers can...

PT-2025-43986

Name of the Vulnerable Software and Affected Versions atjiu pybbs versions up to 6.0.0 Description A flaw exists in atjiu pybbs, specifically within the UserApiController.java file. This issue leads to information disclosure and can be exploited remotely. The exploit is publicly available. The...