Skip to content
OpenAdvisories

Vendor

pancho

1 known vulnerabilities.

Products

Pachno 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-40043

    Pachno 1.0.6 Authentication Bypass via runSwitchUser()

    Pachno 1.0.6 contains an authentication bypass vulnerability in the runSwitchUser() action that allows authenticated low-privilege users to escalate privileges by manipulating the original_username cookie. Attackers can set the client-controlled original_user…

    pancho Pachno