CVE-2024-7266

Summary

CVE-2024-7266 is a user management vulnerability affecting Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP. This flaw enables logged-in users to access a list of all users in the system, including those from other organizations. This issue poses a significant risk to data privacy and unauthorized access. Affected versions include EZD RP from versions 15 before 15.84, from 16 before 16.15, and from 17 before 17.2. It is crucial that users update their systems to the latest versions to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.