Unrated severityNVD Advisory· Published Feb 20, 2026· Updated Feb 23, 2026
CVE-2025-70833
CVE-2025-70833
Description
An Authentication Bypass vulnerability in Smanga 3.2.7 allows an unauthenticated attacker to reset the password of any user (including the administrator) and fully takeover the account by manipulating POST parameters. The issue stems from insecure permission validation in check-power.php.
Affected products
2- Smanga/Smangadescription
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.