CVE-2026-31070
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
May 19, 2026
Vendor
unknown
Description
The LalanaChami Pharmacy Management System (commit 5c3d028) allows unauthenticated remote attackers to escalate privileges by self-assigning an administrative role during registration. The /api/user/signup endpoint fails to validate the role parameter in the request body