CVE-2026-71252

toner-management's admin state-changing handlers (add.php, edit.php, delete.php under admin/toners, admin/toner-brands, admin/printers, and related admin subdirectories) executed INSERT/UPDATE/DELETE database operations with no authentication or authorization check, while access control was enforced only in listing views.

CVSS v3 8.2 HIGH

8.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 4.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://github.com/raghav993/toner-management
https://github.com/raghav993/toner-management/pull/1

Configurations

No configuration.

History

23 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Los gestores de cambio de estado de administrador de toner-management (add.php, edit.php, delete.php bajo admin/toners, admin/toner-brands, admin/printers, y subdirectorios de administrador relacionados) ejecutaron operaciones de base de datos INSERT/UPDATE/DELETE sin verificación de autenticación ni autorización, mientras que el control de acceso se aplicaba solo en las vistas de listado. Un atacante remoto no autenticado podría invocar estos gestores directamente para crear, modificar o destruir datos de la aplicación. El proveedor ha incorporado desde entonces una corrección que requiere una sesión de administrador autenticada antes de que cualquiera de dichos gestores proceda.

Information

Published : 2026-08-05 11:16

Updated : 2026-10-24 15:10

NVD link : CVE-2026-71252

Mitre link : CVE-2026-71252

CVE.ORG link : CVE-2026-71252

JSON object : View

Products Affected

No product.

CWE

CWE-862

Missing Authorization

{"id": "CVE-2026-71252", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-71252", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-05T12:38:53.671621Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 4.2, "exploitabilityScore": 3.9}]}, "affected": [{"source": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "affectedData": [{"vendor": "raghav993", "product": "toner-management", "versions": [{"status": "affected", "version": "0"}, {"status": "unaffected", "version": "fixed"}], "programFiles": ["admin/toners/delete.php", "admin/toner-brands/delete.php", "admin/printers/delete_printer.php"], "defaultStatus": "unknown"}]}], "published": "2026-08-05T11:16:28.383", "references": [{"url": "https://github.com/raghav993/toner-management", "source": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c"}, {"url": "https://github.com/raghav993/toner-management/pull/1", "source": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "toner-management's admin state-changing handlers (add.php, edit.php, delete.php under admin/toners, admin/toner-brands, admin/printers, and related admin subdirectories) executed INSERT/UPDATE/DELETE database operations with no authentication or authorization check, while access control was enforced only in listing views."}, {"lang": "es", "value": "Los gestores de cambio de estado de administrador de toner-management (add.php, edit.php, delete.php bajo admin/toners, admin/toner-brands, admin/printers, y subdirectorios de administrador relacionados) ejecutaron operaciones de base de datos INSERT/UPDATE/DELETE sin verificaci\u00f3n de autenticaci\u00f3n ni autorizaci\u00f3n, mientras que el control de acceso se aplicaba solo en las vistas de listado. Un atacante remoto no autenticado podr\u00eda invocar estos gestores directamente para crear, modificar o destruir datos de la aplicaci\u00f3n. El proveedor ha incorporado desde entonces una correcci\u00f3n que requiere una sesi\u00f3n de administrador autenticada antes de que cualquiera de dichos gestores proceda."}], "lastModified": "2026-10-24T15:10:00.190", "sourceIdentifier": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c"}