PT-2026-8317 · Unknown · Vichan-Devel

Lakshay12311 · Publicado 2026-02-16 · Atualizado 2026-02-16 · CVE-2026-2543

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions vichan-devel versions up to 5.1.5

Description A flaw exists in vichan-devel that allows for unverified password changes. This issue is located in the Password Change Handler component, specifically within the inc/mod/pages.php file. The Password argument can be manipulated to trigger the issue, enabling attackers to change passwords without proper verification. This attack can be carried out remotely. The vendor was notified but did not respond.

Recommendations Update vichan-devel to a version beyond 5.1.5.

Exploit

Correção

Enumeração de Fraquezas

CWE-620

CWE-640

Identificadores relacionados

CVE-2026-2543

Produtos afetados

Vichan-Devel

Referências · 8

• 🔥 https://github.com/lakshayyverma/CVE-Discovery/blob/main/vichan.md · Exploit
• https://t.me/CVEtracker/44796 · Publicação no Telegram
• https://vuldb.com/?ctiid.346152 · Nota
• https://twitter.com/VulmonFeeds/status/2023301073599930693 · Publicação no Twitter
• https://vuldb.com/?id.346152 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-2543 · Nota de Segurança
• https://t.me/cveNotify/152091 · Publicação no Telegram
• https://vuldb.com/?submit.749716 · Nota