CVE-2026-38934
HIGH
NVD
CVSS Score
8.8
Severity
HIGH
Published
Apr 27, 2026
Vendor
unknown
Description
Cross Site Request Forgery vulnerability in diskoverdata diskover-community v.2.3.5. and before allows a remote attacker to escalate privileges and obtain sensitive information via the public/settings_process.php