CVE-2026-112001 - ProjectSend 2.0.0 before 2.7.0 Incorrect Authorization via Users API Token Abilities
CVE ID :CVE-2026-112001 Published : 18. Oktober 2026 12:17 | 1 Stunde, 45 Minuten ago Description :ProjectSend 2.0.0 before 2.7.0 contains an incorrect authorization vulnerability that allows restricted API token holders to change the token owner's credentials via PATCH /api/v1/users/{user}....