CVE-2026-25716

Missing Authorization vulnerability in Hallo Welt! GmbH BlueSpice Extension:BlueSpiceUserManager allows any authenticated user without special privileges to block or unblock arbitrary user accounts, including administrators. The REST endpoints /bs-usermanager/v1/block/create and...