PT-2026-45800 · Unknown · Namelessmc

Huajihd · CVE-2026-35443 · Published 2026-06-02 · Updated 2026-06-02

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions NamelessMC version 2.2.4

Description In the modules/Forum/classes/ForumPostReactionContext.php file, the software verifies if a caller can view the forum but fails to enforce the topic-level view other topics authorization. This allows users who are restricted to viewing only their own topics to read and modify reactions on topics belonging to other users.

Recommendations Update to version 2.2.5.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-35443

GHSA-WCRF-5GCP-PF64

Affected Products

Namelessmc

References · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/35xxx/CVE-2026-35443.json · Exploit
• 🔥 https://github.com/NamelessMC/Nameless/security/advisories/GHSA-wcrf-5gcp-pf64 · Exploit
• https://osv.dev/vulnerability/CVE-2026-35443 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-35443 · Security Note
• https://t.me/CVEtracker/55636 · Telegram Post