CVE-2026-38807

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Insecure Permissions vulnerability in kvf-admin v1.0.0 allows a remote attacker to escalate privileges via the UserController.java component

Published 2026-05-27. Last modified 2026-06-17.