CVE-2024-37768: b1ackc4t 14finger

Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days.

14Finger v1.1 was discovered to contain an arbitrary user deletion vulnerability via the component /api/admin/user?id.

Affected products

• b1ackc4t 14finger: version 1.1 only

Published 2024-07-05. Last modified 2026-06-17.