pancho

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

pancho records in CISA KEV

No pancho vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-28886 CVE-2026-40043 · GHSA-h2hg-847v-g327

Pachno 1.0.6 Authentication Bypass via runSwitchUser()

MEDIUM 64

Pachno 1.0.6 contains an authentication bypass vulnerability in the runSwitchUser() action that allows authenticated low-privilege users to escalate privileges by manipulating the original_username cookie.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00384 Published 2026-04-13 No fix listed CWE-639

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0