CVE-2026-112001 | ProjectSend up to 2.6.x /api/v1/users user improper authorization

October 18, 2026 Yanac

A vulnerability has been found in ProjectSend up to 2.6.x and classified as problematic. This issue affects some unknown processing of the file /api/v1/users. This manipulation of the argument User causes improper authorization.

This vulnerability is handled as CVE-2026-112001. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More