CVE-2025-26375

A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated low-privileged attacker to create users with arbitrary privileges via crafted HTTP requests...

CVE-2025-26375

creationtimestamp| type| source ---|---|--- 2025-02-12 14:48:44+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113991464947758008 2025-02-12 15:09:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhyhdxxf3y26 2025-02-12 15:37:02+00:00| seen|...

CVE-2025-26375

A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated low-privileged attacker to create users with arbitrary privileges via crafted HTTP requests...

CVE-2025-26375

A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated low-privileged attacker to create users with arbitrary privileges via crafted HTTP requests...

CVE-2025-26375

CVE-2025-26375 affects Q-Free MaxTime