PT-2026-45803 · Unknown · Namelessmc

Huajihd · CVE-2026-40571 · Published 2026-06-02 · Updated 2026-06-02

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions NamelessMC version 2.2.4

Description NamelessMC is website software for Minecraft servers. In the file core/classes/Misc/ProfilePostReactionContext.php, the system only verifies the existence of a wall post without enforcing visibility restrictions for blocked or private profiles. This allows authenticated low-privileged users to add reactions to posts on profiles that have blocked them or are set to private.

Recommendations Update to version 2.2.5.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-40571

GHSA-47HR-JJ6C-RQF9

Affected Products

Namelessmc

References · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40571.json · Exploit
• 🔥 https://github.com/NamelessMC/Nameless/security/advisories/GHSA-47hr-jj6c-rqf9 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-40571 · Security Note
• https://osv.dev/vulnerability/CVE-2026-40571 · Vendor Advisory
• https://t.me/CVEtracker/55639 · Telegram Post