Skip to content
Threat Feed

Tag

CVE-2026-39355

1 brief RSS
critical advisory

Genealogy PHP Application Broken Access Control Vulnerability (CVE-2026-39355)

A critical broken access control vulnerability (CVE-2026-39355) in Genealogy PHP application versions prior to 5.9.1 allows authenticated users to transfer ownership of arbitrary teams, leading to complete takeover of team workspaces and unrestricted data access.

broken-access-control php genealogy CVE-2026-39355
2r 6t 1c