Medium severity6.5NVD Advisory· Published Nov 5, 2026
CVE-2026-109849
CVE-2026-109849
Description
Incorrect privilege assignment issue exists in Hinemos. If this vulnerability is exploited, an attacker who can access the password change API with specific permissions that can be assigned to non-administrative users may change the password of an administrative user.
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.