CVE-2026-38807

High

Published: 27/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Insecure Permissions vulnerability in kvf-admin v1.0.0 allows a remote attacker to escalate privileges via the UserController.java component.

The organization may be exposed to unauthorized access to sensitive data or system functions, potentially leading to serious security breaches.

It is recommended to update to the latest version of kvf-admin and review permissions in the system to minimize the risk of privilege escalation.

Original NVD description (English source)

Insecure Permissions vulnerability in kvf-admin v1.0.0 allows a remote attacker to escalate privileges via the UserController.java component