← Back to CVE List
CVE-2026-92860NVD
Vulnerability Summary
A security flaw has been discovered in rcourtman Pulse up to 6.0.4/6.1.0-rc.4. Affected by this issue is the function fmt.Sprintf of the file /api/security/quick-setup of the component Quick Security Setup Handler. The manipulation of the argument Username results in improper input validation. The attack may be performed from remote. Upgrading the affected component is advised.
CVSS v4.0 Base Metrics — Score 9.4 (CRITICAL)
Attack VectorNetwork
Attack ComplexityLow
Attack RequirementsNone
Privileges RequiredHigh
User InteractionNone
Confidentiality (Vulnerable System)High
Integrity (Vulnerable System)High
Availability (Vulnerable System)High
Confidentiality (Subsequent System)High
Integrity (Subsequent System)High
Availability (Subsequent System)High
CVSS v3.1 Base Metrics — Score 9.1 (CRITICAL)
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredHigh
User InteractionNone
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
Affected & Patched Versions
- rcourtman Pulse >= 6.0.0
- rcourtman Pulse >= 6.0.1
- rcourtman Pulse >= 6.0.2
- rcourtman Pulse >= 6.0.3
- rcourtman Pulse >= 6.0.4
- rcourtman Pulse >= 6.1.0-rc.0
- rcourtman Pulse >= 6.1.0-rc.1
- rcourtman Pulse >= 6.1.0-rc.2
- rcourtman Pulse >= 6.1.0-rc.3
- rcourtman Pulse >= 6.1.0-rc.4
Not provided by cveorg for this CVE.