CVE-2026-34408
May 5, 2026, 8:24 p.m.
None
No Score
Description
An issue was discovered in Gambio 4.9.2.0 (patched in 2024-02 v1.0.0 for GX4 v4.0.0.0 to v4.9.2.0). The password reset function can be bypassed to set arbitrary passwords for arbitrary accounts if the ID is known.
Product(s) Impacted
| Vendor | Product | Versions |
|---|---|---|
| Gambio |
|
|
Weaknesses
Common security weaknesses mapped to this vulnerability.
*CPE(s)
Affected systems and software identified for this CVE.
| Type | Vendor | Product | Version | Update | Edition | Language | Software Edition | Target Software | Target Hardware | Other Information |
|---|---|---|---|---|---|---|---|---|---|---|
| a | gambio | gambio | 4.9.2.0 | / | / | / | / | / | / | / |
Tags
Timeline
Published: May 5, 2026, 2:16 p.m.
Last Modified: May 5, 2026, 8:24 p.m.
Last Modified: May 5, 2026, 8:24 p.m.
Status : Deferred
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.