CVE-2026-44961
2026-06-23
17h17 +00:00
17h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
The XML‑RPC API addUser method has a validation bypass introduced in the fix for CVE‑2025‑55129. As a result, API users could create usernames that enabled impersonation or stored XSS attacks. Proper validation has been added where it was missing.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Improper Authentication When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. |
