CVE-2026-23595

Unauthenticated Authentication Bypass in application API allows unauthorized administrative account creation

High · published February 17, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
25.1
In the wild
Unconfirmed
What it is

An authentication bypass in the application API allows an unauthorized administrative account to be created. A remote attacker could exploit this vulnerability to create privileged user accounts. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00332 · 25.1th percentile
Published
2026-02-17T20:45Z
EPSS history
Timeline
  • 17 FEB 20:45Z
    Unauthenticated Authentication Bypass in application API allows unauthorized administrative account creation
    cvelistv5