Skip to content
Threat Feed
Subscribe

Vendor

Movary

1 brief RSS
high advisory

Movary Privilege Escalation via User Management Endpoint Access (CVE-2026-40350)

Movary versions prior to 0.71.1 are vulnerable to a privilege escalation, allowing authenticated non-admin users to access user management endpoints and create new administrator accounts due to missing middleware and flawed authorization checks.

Movary cve-2026-40350 privilege-escalation web-application
2r 1t 1c