CVE-2026-79957

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the request body without verifying that the authenticated token belongs to the requested account (CWE-639). Any authenticated user can iterate the ID parameter to retrieve the full profile record of every other user, including passwords stored in cleartext (CWE-256), enabling account takeover and credential-stuffing attacks.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://blog.blacklanternsecurity.com/p/cve-2026-79957-insecure-direct-object

Weakness type (CWE)

CWE-639

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Referenced assets1 URL

By indicator

https://open.substack.com/pub/blacklanternsecurity/p/cve-2026-79957-insecure-direct-object?r=rbmdk&utm_campaign=post-expanded-share&utm_medium=web

Full discourse1 post

Black Lantern Security (BLSOPS)@BlackLanternLLC1d
New write-up on an authorization found in ServiceNext. One valid account was enough to pull every user in the app, cleartext passwords included. Fully disclosed, fully remediated. Write up on the BLS blog. https://open.substack.com/pub/blacklanternsecurity/p/cve-2026-79957-insecure-direct-object?r=rbmdk&utm_campaign=post-expanded-share&utm_medium=web #CVE #cybersecurity
02002158
714 followersView on X

Explore more

Back to dashboard