CVE-2026-73789: Unauthenticated Insecure Parameter Manipulation allows Data Tampering In CPPM Web Interface
Published Sep 9, 2026
·Updated
A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate account settings. Successful exploitation could allow an attacker to extend network access beyond policy limits, leading to unauthorized prolonged use of network resources.
Affected Software
1 affected component
CPPM guest account management services
Event History
Sep 9, 2026
CVE Published
via MITRE·07:15 PM
Data Sourced
via MITRE·07:15 PM
DescriptionSeverity