CVE-2026-41964
HighCVSS 8.4Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
CVE-2026-41964 describes a permission control vulnerability in a web application. Exploitation of this vulnerability may impact system availability.
Risk Assessment
This threat could lead to service disruptions, affecting application availability for users.
Recommendation
It is recommended to review and strengthen permission control mechanisms in the web application to minimize the risk of exploitation.
Other vulnerabilities in Aplikacja webowa
See all- CVE-2026-6356Critical
A vulnerability in the web application allows standard users to escalate their privileges to those of a super administrator through parameter manipulation, enabling them to access and modify sensitive information.
- CVE-2023-4659Critical
A Cross-Site Request Forgery (CSRF) vulnerability allows an attacker to perform actions as an administrator simply by changing the token value to "admin". It is also possible to send POST, GET and DELETE requests without any token value, allowing an unprivileged remote user to create, delete and modify user accounts.
- CVE-2025-58585Medium
Multiple endpoints with sensitive information do not require authentication, making the application susceptible to information gathering.
Original NVD description (English source)
Permission control vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS