CVE-2026-27546

Description

An unauthenticated remote attacker can exploit an authentication bypass in the _account_log function to log in as an admin, even when accounts are properly configured.

CVSS Vector

References

• https://www.certvde.com/en/advisories/VDE-2026-014/
• https://www.certvde.com/en/advisories/VDE-2026-027/
• https://www.certvde.com/en/advisories/VDE-2026-028/