> CVE-2026-38474

« BACK_TO_HOME
PUBLISHED
2026-08-25 22:17
MODIFIED
2026-08-25 22:17
EPSS (Prob. Exploit)
0.37%
Top 70.2%
DATA SOURCES:
NVD 🔗 2026-08-25 FIRST EPSS 🔗 2026-10-18

> DESCRIPTION

GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 suffers from a Broken access control vulnerability in the IP lock manager, which allows remote authenticated users to add, modify, or delete IP lock entries for arbitrary accounts via tools.php?action=iplock.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> HISTORIQUE DES MODIFICATIONS

Première apparition
25/08/2026 22:17
Source: NVD
Total des modifications: 0 Dernière mise à jour: 2 months ago

> REFERENCES

https://github.com/Mosasauroidea/GazellePW/blob/86c4bedf727691b5a97af42a4864869d...
https://github.com/Mosasauroidea/GazellePW/blob/86c4bedf727691b5a97af42a4864869d...
https://github.com/Mosasauroidea/GazellePW/blob/86c4bedf727691b5a97af42a4864869d...
https://snaacky.com/1-click-exploit-chain-for-complete-gazellepw-database-compro...
« BACK_TO_HOME