CVE-2026-79957 | ServiceNext GetUsuarios endpoint /api/Usuario/GetUsuarios ID authorization

October 14, 2026 Yanac

A vulnerability marked as critical has been reported in ServiceNext. This vulnerability affects unknown code of the file /api/Usuario/GetUsuarios of the component GetUsuarios endpoint. Performing a manipulation of the argument ID results in authorization bypass.

This vulnerability is identified as CVE-2026-79957. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More