CVE-2026-40571 | NamelessMC Nameless 2.2.4 Profile Page ProfilePostReactionContext.php authorization (GHSA-47hr-jj6c-rqf9)

A vulnerability was found in NamelessMC Nameless 2.2.4. It has been classified as critical. This issue affects some unknown processing of the file core/classes/Misc/ProfilePostReactionContext.php of the component Profile Page Handler. The manipulation leads to missing authorization.

This vulnerability is traded as CVE-2026-40571. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to install a patch to address this issue.VulDB Recent EntriesRead More