01 Record

CVE-2026-77036

elunez eladmin GenConfigController improper authorization

MediumPUBLISHEDCNA: VulDB

Base score5.3 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

02 Description

elunez eladmin GenConfigController improper authorization

Published

2026-08-20 17:30Z1 DAY AGO

Last updated

2026-08-20 17:30Z1 DAY AGO

Reserved

2026-08-20

Assigning CNA

VulDB

Record state

PUBLISHED

Severity

Medium (CVSS 5.3)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Weaknesses

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

fec3c995eb0acda26c374233470fc589dee8d91f3036a027b9b0fff45e458e19

VendorProductVersionsPlatforms

elunezeladmin2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7—

vuldb.comVDB-393643 | elunez eladmin GenConfigController improper authorizationhttps://vuldb.com/vuln/393643vdb-entrytechnical-description
vuldb.comVDB-393643 | CTI Indicators (IOB, IOC, TTP, IOA)https://vuldb.com/vuln/393643/ctisignaturepermissions-required
vuldb.comCVE-2026-77036 | CVE Analysis and Reporthttps://vuldb.com/cve/CVE-2026-77036third-party-advisory
vuldb.comSubmit #880860 | elunez eladmin 2.7 Improper Authorizationhttps://vuldb.com/submit/880860third-party-advisory
github.comhttps://github.com/elunez/eladmin/issues/903exploitissue-tracking
github.comhttps://github.com/elunez/eladmin/product