← Database

CVE-2026-29202

HIGH CVSS: 8.8 Published: 2026-05-08 Modified: 2026-06-17

Description

Insufficient input validation of the `plugin` parameter of the `create_user` plugin allows arbitrary Perl code execution on behalf of the already authenticated account's system user.

Affected Platforms

Unknown

Weakness Type

CWE-94

References