CVE-2026-38470

A Broken access control vulnerability in the API user endpoint in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows unprivileged, authenticated users to enable or disable arbitrary user accounts via the req=disable or req=enable action using a normal user-created...

CVE-2026-38470

A Broken Access Control vulnerability exists in the API user endpoint (app/API/User.php) of GazellePW (GazellePosterWall) at commit 86c4bedf727691b5a97af42a4864869d18446449. Unprivileged, authenticated users can enable or disable arbitrary user accounts by invoking the req=disable or req=enable a...

CVE-2026-38470

A Broken access control vulnerability in the API user endpoint in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows unprivileged, authenticated users to enable or disable arbitrary user accounts via the req=disable or req=enable action using a normal user-created...

EUVD-2025-201723

Incorrect access control in the /api/v1/user endpoint of usememos memos v0.25.2 allows unauthorized attackers to create arbitrary accounts via a crafted request...

EUVD-2023-40080

Malicious code in bioql PyPI...