CyberRota Analysis
Uzaktan istismar edilebilir olabilir.
CVE
CVE-2026-5652
Severity
CRITICAL
CVSS
9
EPSS
0.10%
Original NVD Description
An insecure direct object reference vulnerability in the Users API component of Crafty Controller allows a remote, authenticated attacker to perform user modification actions via improper API permissions validation.