What is CVE-2026-54367?
CVE-2026-54367 is an authentication bypass vulnerability in CentreStack versions prior to 17.2. It allows unauthenticated attackers to read, write, or delete arbitrary account settings by exploiting exposed API endpoints lacking authorization checks. Users must immediately upgrade to version 17.2.
Azərbaycanca: CVE-2026-54367, CentreStack platformunun 17.2-dən əvvəlki versiyalarında aşkarlanmış autentifikasiya bypass zəifliyidir. Bu boşluq autentifikasiya olunmamış hücumçulara API endpoint-lərindəki avtorizasiya çatışmazlığından istifadə edərək ixtiyari hesab parametrlərini oxumağa, yazmağa və ya silməyə imkan verir. İstifadəçilər dərhal 17.2 versiyasına yeniləmə etməlidir.
Related CVEs
link basis: same weakness class CWE-306
FAQ2
Which platform is affected by CVE-2026-54367 and what versions are vulnerable?
This vulnerability affects CentreStack platform versions prior to 17.2.
What does CVE-2026-54367 allow unauthenticated attackers to do?
It allows unauthenticated attackers to read, write, or delete arbitrary account settings by exploiting exposed API endpoints lacking authorization checks.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.