Skip to content
OpenAdvisories

Vendor

arp242

1 known vulnerabilities.

Products

GoatCounter 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2026-108740

    GoatCounter through 2.7.0 Privilege Escalation via /user/pref Mass Assignment

    GoatCounter through 2.7.0 contains a mass assignment privilege escalation vulnerability in the userPrefSave handler that allows logged-in users to modify protected account fields via form-encoded requests. Attackers with read-only access can POST user.access[…

    arp242 GoatCounter