CVE-2025-26377 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged)…
High CVSS: 8.1

CVE-2025-26377

A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to remove users via crafted HTTP requests.
Vendor
Q-free
Product
Maxtime
CWE
CWE-862
Yayın Tarihi
2025-02-12 14:15:38
Güncelleme
2025-10-28 15:41:39
Source Identifier
prodsec@nozominetworks.com
KEV Date Added
-

Kategoriler

CWE-862 Maxtime HIGH Q-free 2025

Referanslar

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-26377