CVE-2026-91995

CriticalCVSS 9.1

Published: 15/09/2026(UTC)Updated: 24/09/2026(UTC)Translated: 15/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.88%

57th percentile - higher than 57% of all known CVEs

Summary

pig before 4.1.0 contains an authentication bypass vulnerability in the /register/password endpoint where password verification results are discarded, allowing any value as the current password. Remote attackers can submit a username with an incorrect current password to overwrite any account credential including the admin account and gain full administrative control.

Risk Assessment

An attacker can gain full administrative control of the application without knowing any password. This poses a critical risk to confidentiality, integrity, and availability of the system.

Recommendation

Upgrade pig to version 4.1.0 or later. Until patched, consider disabling or restricting access to the /register/password endpoint.

Other vulnerabilities in pig

CVE-2026-111343Medium
pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allows any authenticated user to read other users' profiles via GET /admin/user/details/{id}. Low-privilege attackers can enumerate sequential user ids to obtain usernames, real names, phone numbers, emails, linked third-party accounts, and role assignments.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS