CVE-2026-62967 | Sinamics ZTNET up to 0.7.x User Deactivation invalidateUser.ts userId access control

October 30, 2026 Yanac

A vulnerability was found in Sinamics ZTNET up to 0.7.x and classified as problematic. Impacted is an unknown function of the file src/pages/api/auth/user/invalidateUser.ts of the component User Deactivation. Executing a manipulation of the argument userId can lead to improper access controls.

This vulnerability is tracked as CVE-2026-62967. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More