CVE-2026-92467 in microservices-platform
الملخص
بحسب MITRE • 16/09/2026
zlt2000 microservices-platform through 6.0.0 contains an unverified password change vulnerability in the PUT /users/password endpoint that allows authenticated users to change any account password by omitting the current password check. Attackers can supply an arbitrary user id in the request body and a new password to overwrite credentials of any non-administrator account without verification.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.