Is CVE-2026-109119 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-109119?

CVE-2026-109119 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-109119

Description

Improper Privilege Management in the user management API endpoint (/api/users/{username_or_id}) in Rdiffweb allows authenticated users to elevate their privileges to administrator by modifying the role parameter in a POST request.