CVE-2025-26376

A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated low-privileged attacker to modify user data via crafted HTTP requests...

CVE-2025-26376

creationtimestamp| type| source ---|---|--- 2025-02-12 16:02:47+00:00| seen| https://t.me/cvedetector/17872 2025-02-12 16:05:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113991769045750140...

CVE-2025-26376

CVE-2025-26376 concerns Q-Free MaxTime

CVE-2025-26376

A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated low-privileged attacker to modify user data via crafted HTTP requests...