CVE-2026-125364 | frab up to 0.9.1 Users Controller UsersController#update/UsersController#create conference_users_attributes privileges management

A vulnerability described as critical has been identified in frab up to 0.9.1. This affects the function UsersController#update/UsersController#create of the component Users Controller. The manipulation of the argument conference_users_attributes results in improper privilege management.

This vulnerability is reported as CVE-2026-125364. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More