PT-2026-137244
CVE-2026-109849
·
Published
2026-11-05
·
Updated
2026-11-05
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Incorrect privilege assignment issue exists in Hinemos. If this vulnerability is exploited, an attacker who can access the password change API with specific permissions that can be assigned to non-administrative users may change the password of an administrative user.
Found an issue in the description? Have something to add? Feel free to write us 👾