Findings

CVE-2026-8046

The affected products insufficiently verify authorization when deleting user accounts.

Published May 26, 2026 · updated Jul 23, 2026

The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged remote user can exploit this vulnerability to delete other users, including those with higher privileges.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 26, 2026 · NIST NVD

    Detected

    The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged remote user can exploit this vulnerability to delete other users, including those with higher privileges.

  2. Jul 23, 2026 · NIST NVD

    Updated

    The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged remote user can exploit this vulnerability to delete other users, including those with higher privileges.

Sources

  • CVE.orgVulnerability recordCVE-2026-8046

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-8046

    The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged remote user can exploit this vulnerability to delete other users, including those with higher privileges.

    nvd.nist.gov

References