CVE-2026-18972 - Velociraptor authenticated identity-spoofing vulnerability
Brief
CVE ID : CVE-2026-18972
Published : Aug. 11, 2026, 12:30 p. m.
- 33 minutes ago
Description : An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header \"Grpc-Metadata-USER\". This can lead to an account takeover attack from a user with low privileges to administrator.
Severity: 9.6
- CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...