PT-2026-140390
CVE-2026-118795
·
Published
2026-11-09
·
Updated
2026-11-09
Description by
CVSS 4.0
5.9
MediumMetricsAV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Administrative roles and module permissions are stored in mutable local database fields, allowing privilege escalation for attackers with database write access.
Found an issue in the description? Have something to add? Feel free to write us 👾