pancho CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH pancho CVE published 2026-04-13

CVE-2026-40043

CVE-2026-40043 is an authentication bypass vulnerability in Pachno 1.0.6 that allows low-privilege users to escalate privileges by manipulating the original_username cookie. This issue enables attackers to switch to user ID 1 and potentially obtain session tokens or password hashes of administrator accounts. The vulnerability affects Pachno deployments, particularly those with low-privilege user access to [truncated]