Lucene search
+L

15 matches found

Github Security Blog
Github Security Blog
added 2026/06/08 11:7 p.m.16 views

FUXA's scheduler API missing admin check enables operator-to-admin escalation via scheduled device actions

Summary An authorization issue in the Scheduler API allowed authenticated non-admin users to create or modify scheduled actions that should be restricted to administrators. Details The Scheduler API did not correctly enforce administrator permissions when processing scheduler modifications. As a...

5.7AI score0.00048EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder