https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 17:33:04 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-262403 EUVD-2026-262403 https://cve.radiocsirt.org/vuln/euvd-2026-262403 https://cve.radiocsirt.org/vuln/fkie_cve-2025-58386 <p>In Terminalfour 8 through 8.4.1.1, the userLevel parameter in the user management function is not subject to proper server-side authorization checks. A Power User can intercept and modify this parameter to assign the Administrator role to other existing lower-privileged accounts, or invite a new lower-privileged account and escalate its privileges. While manipulating this request, the Power User can also change the target account&#39;s password, effectively taking full control of it.</p> <p>In Terminalfour 8 through 8.4.1.1, the userLevel parameter in the user management function is not subject to proper server-side authorization checks. A Power User can intercept and modify this parameter to assign the Administrator role to other existing lower-privileged accounts, or invite a new lower-privileged account and escalate its privileges. While manipulating this request, the Power User can also change the target account&#39;s password, effectively taking full control of it.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-58386 https://cve.radiocsirt.org/vuln/ghsa-gcr9-vvrm-c46v <p>In Terminalfour 8 through 8.4.1.1, the userLevel parameter in the user management function is not subject to proper server-side authorization checks. A Power User can intercept and modify this parameter to assign the Administrator role to other existing lower-privileged accounts, or invite a new lower-privileged account and escalate its privileges. While manipulating this request, the Power User can also change the target account&#39;s password, effectively taking full control of it.</p> <p>In Terminalfour 8 through 8.4.1.1, the userLevel parameter in the user management function is not subject to proper server-side authorization checks. A Power User can intercept and modify this parameter to assign the Administrator role to other existing lower-privileged accounts, or invite a new lower-privileged account and escalate its privileges. While manipulating this request, the Power User can also change the target account&#39;s password, effectively taking full control of it.</p> https://cve.radiocsirt.org/vuln/ghsa-gcr9-vvrm-c46v