Skip to content
OpenAdvisories

Vendor

ikus-soft

2 known vulnerabilities.

Products

rdiffweb 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-109119

    Missing Authorization in rdiffweb

    Improper Privilege Management in the user management API endpoint (/api/users/{username_or_id}) in Rdiffweb allows authenticated users to elevate their privileges to administrator by modifying the role parameter in a POST request.

    ikus-soft rdiffweb