HIGH 7.1 NVD

CVE-2026-109849

Incorrect privilege assignment issue exists in Hinemos. If this vulnerability is exploited, an attacker who can access the password change API with specific per

Incorrect privilege assignment issue exists in Hinemos. If this vulnerability is exploited, an attacker who can access the password change API with specific permissions that can be assigned to non-administrative users may change the password of an administrative user.

References

https://jvn.jp/en/jp/JVN46901199/
https://www.hinemos.info/news/hinemos-vulnerability-20261104

Published: 2026-11-05 · Source: NVD · Feed updated: 2026-11-05

This high severity vulnerability with a CVSS score of 7.1 was published on 2026-11-05 via NVD.

vulnfeed aggregates 16624 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.