CVE-2026-27553
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnostics_tab/ajax_diag_table_rows endpoint using a valid user cookie allowing disclosure of all user password hashes.
Risk Assessment
The risk is the disclosure of all user password hashes, potentially leading to account takeover and further attacks.
Recommendation
It is recommended to immediately validate the schema path parameter and restrict access to the endpoint to authorized users only.
Other vulnerabilities in Unknown (likely a web application)
Original NVD description (English source)
A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnostics_tab/ajax_diag_table_rows endpoint using a valid user cookie allowing disclosure of all user password hashes.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS