CVE-2026-123664 | nasa-gcn gcn.nasa.gov up to b299b562af665878964b981a459f0a9c04b11adf Email Notification /user/email Recipient improper authorization (Issue 3805)

SecurityVulns
Yanac

A vulnerability classified as critical has been found in nasa-gcn gcn.nasa.gov up to b299b562af665878964b981a459f0a9c04b11adf. This issue affects some unknown processing of the file /user/email of the component Email Notification Handler. Performing a manipulation of the argument Recipient results in improper authorization.

This vulnerability is reported as CVE-2026-123664. The attack is possible to be carried out remotely. Moreover, an exploit is present.

This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified.

The pull request to fix this issue awaits acceptance.VulDB Recent EntriesRead More