CVE-2026-38474 Mosasauroidea CVE debrief

Who should care

Users of GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449, administrators of systems using GazellePW, and security teams responsible for vulnerability management should be aware of this vulnerability. They should review and restrict IP lock manager functionality to prevent unauthorized modifications. They should also implement additional access controls and monitoring for tools.php?action=iplock. GazellePW operators and platform administrators need to assess their exposure and apply mitigations. Vulnerability management and security teams need to prioritize patching and verify GazellePW versions.

Technical summary

The GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 has a Broken access control vulnerability in the IP lock manager. This allows remote authenticated users to add, modify, or delete IP lock entries for arbitrary accounts via tools.php?action=iplock. The vulnerability is located in the IP lock manager functionality. The defensive impact is that an attacker could potentially modify IP lock entries for arbitrary accounts. The source-grounded technical framing indicates that the vulnerability is in the tools.php file with the iplock action.

Defensive priority

Authenticated users may be able to modify IP lock entries for arbitrary accounts.

Recommended defensive actions

• Review and restrict IP lock manager functionality to prevent unauthorized modifications.
• Implement additional access controls and monitoring for tools.php?action=iplock.
• Verify GazellePW versions and apply vendor patches if available.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The CVE-2026-38474 record indicates a Broken access control vulnerability in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449, which allows remote authenticated users to add, modify, or delete IP lock entries for arbitrary accounts via tools.php?action=iplock. Official CVE and NVD records are available.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.