CVE-2026-2543

The record

A vulnerability was identified in vichan-devel vichan up to 5.1.5. This vulnerability affects unknown code of the file inc/mod/pages.php of the component Password Change Handler. The manipulation of the argument Password leads to unverified password change. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Affected packages

Related vulnerabilities

• CVE-2026-97380 MariaDB server is a community developed fork of MySQL server. CWE-620
• CVE-2026-85591 phpMyFAQ versions before 4.1.8 contain an authentication bypass vulnerability in the user… CWE-620
• CVE-2026-73292 Semaphore UI is a web interface for managing DevOps tools. CWE-620
• CVE-2026-54801 A vulnerability has been identified in CPCI85 Central Processing/Communication (All… CWE-620
• CVE-2026-44733 OpenProject is open-source, web-based project management software. CWE-620
• CVE-2025-71328 Flowise before 3.0.10 contains an unverified password change vulnerability. CWE-620
• CVE-2025-71337 Flowise before 3.0.10 (affected versions 3.0.7 and earlier) contains an unverified email… CWE-620
• CVE-2026-5386 The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated… CWE-620