EUVD-2026-120545

Map-OS 5.0.0 to before 5.2.2 contains a privilege escalation vulnerability in the REST users API that allows non-administrator operators holding the cUsuario permission to bypass permission-delegation and super-administrator protections. Attackers can send POST, PUT, or DELETE requests to...

CVE-2026-125382

Map-OS 5.0.0 to before 5.2.2 contains a privilege escalation vulnerability in the REST users API that allows non-administrator operators holding the cUsuario permission to bypass permission-delegation and super-administrator protections. Attackers can send POST, PUT, or DELETE requests to...

CVE-2026-125382

Map-OS versions 5.0.0 to before 5.2.2 are vulnerable to a privilege escalation flaw in the REST users API . Non-administrator operators with the cUsuario permission can bypass permission-delegation and super-administrator protections. By sending POST , PUT , or DELETE requests to /api/v1/usuarios...

CVE-2026-125382 Map-OS 5.0.0 to before 5.2.2 Privilege Escalation via /api/v1/usuarios

Map-OS 5.0.0 to before 5.2.2 contains a privilege escalation vulnerability in the REST users API that allows non-administrator operators holding the cUsuario permission to bypass permission-delegation and super-administrator protections. Attackers can send POST, PUT, or DELETE requests to...

PT-2026-141205

Map-OS 5.0.0 to before 5.2.2 contains a privilege escalation vulnerability in the REST users API that allows non-administrator operators holding the cUsuario permission to bypass permission-delegation and super-administrator protections. Attackers can send POST, PUT, or DELETE requests to...