CVE-2026-15538

Publié : 13 juillet 2026

Modifié : 13 juillet 2026

Score CVSS

6.3

MEDIUM

Description détaillée

A weakness has been identified in primefaces primereact up to 10.9.8. This issue affects the function ObjectUtils.mutateFieldData of the component API. This manipulation of the argument Field causes improperly controlled modification of object prototype attributes. The attack is possible to be carried out remotely. The project was informed of the problem early through an issue report but has not responded yet. This vulnerability only affects products that are no longer supported by the maintainer.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://github.com/Mantle-UI/mantle-ui/issues/50 https://github.com/primefaces/primereact/https://github.com/primefaces/primereact/issues/8553 https://vuldb.com/cve/CVE-2026-15538 https://vuldb.com/submit/855024 https://vuldb.com/vuln/377888 https://vuldb.com/vuln/377888/cti

Dernières Vulnérabilités

CVE-2026-57830

The Joomla extension Helix Ultimate is vulnerable to an unauthenticated arbitrary file deletion.

VOIR DÉTAILS

CVE-2026-57829

The Joomla extension Helix Ultimate is vulnerable to an unauthenticated stored XSS.

VOIR DÉTAILS

CVE-2026-4769

Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.

VOIR DÉTAILS