CVE-2026-60135: Incorrect User Management

An attacker can modify data that should be restricted to read‑only access...