Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The create and edit flows do not restrict which user properties may be submitted and do not enforce access control on the frontend user group assignment. As a result, an attacker can assign an arbitrary frontend user group to a newly registered or edited account, gaining unauthorized access to content and functionality restricted to privileged frontend user groups.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-46721 Unauthorized Frontend User Group Assignment via Unrestricted Access Control in User Creation and Edit Flows https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-46721
Post summary
The post lists CVE-2026-46721, describing an unauthorized user group assignment vulnerability with a brief mention and a link to a vulnerability details page.