CVE-2026-2693 — CoCoTeaNet CyreneAdmin System Info Endpoint getCount improper authorization

CVE-2026-2693

CoCoTeaNet CyreneAdmin System Info Endpoint getCount improper authorization PUBLISHED

Description (CNA)

A vulnerability was determined in CoCoTeaNet CyreneAdmin up to 1.3.0. This vulnerability affects unknown code of the file /api/system/dashboard/getCount of the component System Info Endpoint. Executing a manipulation can lead to improper authorization. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

Affected (CNA)

Vendor / product	Versions
CoCoTeaNet / CyreneAdmin	affected 1.0; affected 1.1; affected 1.2; affected 1.3.0

CWE

CWE-285, CWE-266

References

https://vuldb.com/?id.346493
https://vuldb.com/?ctiid.346493
https://vuldb.com/?submit.754242

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.