PT-2026-8317 · Unknown · Vichan-Devel

Lakshay12311 · Published 2026-02-16 · Updated 2026-02-16 · CVE-2026-2543

Positive Technologies · (AI Summary)

CVSS v2.0

3.3

3.3

Low

Base vector

AV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions vichan-devel versions up to 5.1.5

Description A flaw exists in vichan-devel that allows for unverified password changes. This issue is located in the Password Change Handler component, specifically within the

inc/mod/pages.php

file. The

Password

argument can be manipulated to trigger the issue, enabling attackers to change passwords without proper verification. This attack can be carried out remotely. The vendor was notified but did not respond.

Recommendations Update vichan-devel to a version beyond 5.1.5.

Exploit

Fix

Weakness Enumeration

CWE-640

CWE-620

Related Identifiers

CVE-2026-2543

Affected Products

Vichan-Devel

References · 8

• 🔥 https://github.com/lakshayyverma/CVE-Discovery/blob/main/vichan.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-2543 · Security Note
• https://vuldb.com/?ctiid.346152 · Note
• https://t.me/cveNotify/152091 · Telegram Post
• https://vuldb.com/?id.346152 · Note
• https://twitter.com/VulmonFeeds/status/2023301073599930693 · Twitter Post
• https://t.me/CVEtracker/44796 · Telegram Post
• https://vuldb.com/?submit.749716 · Note