CVE-2026-114515 | schorschii OCO-Server up to 1.2.2 Permission Check CoreLogic.class.php uninstallSelfService uninstall_package_assignment_id privileges management

SecurityVulns
Yanac

A vulnerability categorized as problematic has been discovered in schorschii OCO-Server up to 1.2.2. Affected is the function lib/SelfService/CoreLogic.class.php::uninstallSelfService of the file lib/SelfService/CoreLogic.class.php of the component Permission Check. Executing a manipulation of the argument uninstall_package_assignment_id can lead to improper privilege management.

The identification of this vulnerability is CVE-2026-114515. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More