https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T11:52:00.990895+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-29002 CVE-2026-29002 — CouchCMS Privilege Escalation via f_k_levels_list Parameter 2026-10-07T11:52:01.006134+00:00

Affected: CouchCMS

CouchCMS contains a privilege escalation vulnerability that allows authenticated Admin-level users to create SuperAdmin accounts by tampering with the f_k_levels_list parameter in user creation requests. Attackers can modify the parameter value from 4 to 10 in the HTTP request body to bypass authorization validation and gain full application control, circumventing restrictions on SuperAdmin account creation and privilege assignment.