CVE-2022-36521: Cskefu

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Insecure permissions in cskefu v7.0.1 allows unauthenticated attackers to arbitrarily add administrator accounts.

Affected products

• Cskefu Cskefu: version 7.0.1 only

Published 2022-08-26. Last modified 2026-06-17.