CVE-2026-8127: eladmin Users API Endpoint UserController.java checkLevel access control
A vulnerability has been found in eladmin up to 2.7. Impacted is the function checkLevel of the file /rest/UserController.java of the component Users API Endpoint. Such manipulation leads to improper access controls. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8127?
CVE-2026-8127 has a high severity due to improper access controls in the Users API Endpoint.
How do I fix CVE-2026-8127?
To fix CVE-2026-8127, update eladmin to version 2.8 or later where the vulnerability has been addressed.
What components are affected by CVE-2026-8127?
CVE-2026-8127 affects the Users API Endpoint in eladmin versions up to 2.7.
What type of vulnerability is CVE-2026-8127?
CVE-2026-8127 is classified as an access control vulnerability.
Is there a workaround for CVE-2026-8127?
Currently, the best approach is to upgrade to the latest version since no specific workarounds have been provided.