low2.7
CVE-2026-61971
Authorization Bypass Through User-Controlled Key vulnerability in Cozmoslabs User Profile Picture metronet-profile-picture allows Exploiting Incorrectly Config…
Impact
Authorization Bypass Through User-Controlled Key vulnerability in Cozmoslabs User Profile Picture metronet-profile-picture allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Profile Picture: from n/a through <= 2.6.3.
Affected products
| Product | Affected versions |
|---|---|
| User Profile Picture: From N/A Through | through 2.6.3. |
Versions were read from the advisory text. No structured product data has been published for this record yet.