CVE-2026-77036
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A vulnerability was found in elunez eladmin up to 2.7. The impacted element is the function EmailController/AliPayController/GeneratorController/GenConfigController. The manipulation results in improper authorization. The attack can be launched remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Risk Assessment
The vulnerability may allow unauthorized access to administrative functions or sensitive data, potentially leading to confidentiality and integrity breaches. The publicly available exploit increases the risk of exploitation.
Recommendation
It is recommended to apply available patches or upgrade to a newer version if available, and restrict access to affected functions.
Other vulnerabilities in eladmin
Original NVD description (English source)
A vulnerability was found in elunez eladmin up to 2.7. The impacted element is the function EmailController/AliPayController/GeneratorController/GenConfigController. The manipulation results in improper authorization. The attack can be launched remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.