CVE-2026-92401

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-92401
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-92401.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-92401
Published
2026-09-16T16:30:07Z
Modified
2026-10-08T02:52:32Z
Severity
  • 6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X CVSS Calculator
Summary
ChangeWeDer crm improper authentication
Details

A vulnerability was identified in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. This vulnerability affects the function top.upstudy.crm.utils.LoginUserUtil.releaseUserIdFromCookie. The manipulation leads to improper authentication. The attack can be initiated remotely. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-287"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/92xxx/CVE-2026-92401.json"
}
References

Affected packages

Git / github.com/changeweder/crm

Affected ranges

Type
GIT
Repo
https://github.com/changeweder/crm
Events
Introduced
c07bd4c97141521af6475034bc58523beed51bbd
Last Affected
c07bd4c97141521af6475034bc58523beed51bbd

Affected versions

Other
c07bd4c97141521af6475034bc58523beed51bbd

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-92401.json"