[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fAH1YugcstgmRYmQFISk2zDX7mB1kEDoj_AlE6pocTTI":3,"g5a-risk:CVE-2026-53645":11},{"success":4,"data":5,"meta":73},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":10,"cvssScore":11,"cvssVector":11,"cvssMetrics":12,"epssScore":16,"epssPercentile":11,"epssTimeSeries":17,"severity":18,"affectedProducts":19,"affectedProductsCount":20,"references":21,"referencesCount":26,"weaknesses":27,"weaknessesCount":26,"isActivelyExploited":36,"cisaInfo":11,"otxData":11,"relatedBlogPosts":37,"seoMetadata":38,"configurations":63,"relatedVendorCves":64,"notableEvents":65},"CVE-2026-53645","What is CVE-2026-53645?","FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow a low-privileged staff account to grant arbitrary module permissions to itself through the admin API, resulting in persistent privilege escalation. A staff user that only has `staff.create_and_edit_staff` can call `\u002Fapi\u002Fadmin\u002Fstaff\u002Fpermissions_update` targeting their own account and write any permission structure, bypassing the intended role-based access control boundary. Version 0.8.0 patches the issue. Some workarounds are available. Restrict the `staff.create_and_edit_staff` permission to only highly trusted staff members and\u002For use a reverse proxy or WAF to restrict access to `\u002Fapi\u002Fadmin\u002Fstaff\u002Fpermissions_update` to specific trusted roles.","FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow a low-privileged staff account to grant arbitrary modu...","2026-07-06T23:16:56.493",null,{"CVSSMetricV31":13,"CVSSMetricV30":14,"CVSSMetricV2":15,"CVSSMetricV40":11},[],[],[],0.00031,[11,11,11,11,16,16,16],"Unknown",[],0,[22],{"url":23,"source":24,"tags":25},"https:\u002F\u002Fgithub.com\u002FFOSSBilling\u002FFOSSBilling\u002Fsecurity\u002Fadvisories\u002FGHSA-4hf7-xxxw-64rm","GitHub",[],1,[28],{"id":29,"name":30,"description":31,"extendedDescription":32,"status":33,"abstraction":34,"structure":35},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","","Draft","Class","Simple",false,[],{"title":39,"metaDescription":40,"keywords":41,"canonicalUrl":42,"structuredData":43},"What is CVE-2026-53645? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2026-53645, a unknown severity cyber security vulnerability from 2026. FOSSBilling is a free, open-source billing and client ma...","CVE-2026-53645, CVE-2026-53645 vulnerability, CVE-2026-53645 security, unknown severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation","\u002Fwhat-is\u002Fcve-2026-53645",{"@context":44,"@type":45,"headline":39,"description":40,"datePublished":10,"dateModified":10,"author":46,"publisher":50,"about":54,"mainEntityOfPage":58,"articleSection":61,"keywords":62},"https:\u002F\u002Fschema.org","TechArticle",{"@type":47,"name":48,"url":49},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":47,"name":48,"url":49,"logo":51},{"@type":52,"url":53},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":55,"name":6,"description":56,"additionalType":57},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":59,"@id":60},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2026-53645","Cybersecurity","CVE-2026-53645, CVE-2026-53645 vulnerability, CVE-2026-53645 security, unknown severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[],[],[66],{"id":67,"eventType":68,"eventTime":69,"details":70,"label":71,"color":72},"19402bf7-ec92-4211-a5f7-a2aa5651516a","NEW_NVD","2026-07-07T04:01:18.50557+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":10,"cacheTime":74,"version":75},1793194487625,"2.0"]