Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: pig-mesh Clear all filters
TI-2026-75077 CVE-2026-111343

pig-mesh pig: missing authorization on user details endpoint

Priority MEDIUM 57

pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allows any authenticated user to read other users' profiles via GET /admin/user/details/{id}.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00315 Published 2026-10-15 No fix listed CWE-862
TI-2026-62125 CVE-2026-91995 · GHSA-7g92-2j5x-mj6h

pig before 4.1.0 Unverified Password Change via /register/password

Priority MEDIUM 50

pig before 4.1.0 contains an authentication bypass vulnerability in the /register/password endpoint where password verification results are discarded, allowing any value as the current password.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00876 Published 2026-09-15 Fixed in 4.1.0 CWE-620