These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The CVE-2026-92468 vulnerability in the zlt2000 microservices-platform allows authenticated attackers to read any Elasticsearch index, potentially exposing sensitive user records and password hashes. This issue arises from an authorization bypass in the search-center service, enabling attackers to query arbitrary indices, including sys_user, without proper access controls.
CVE-2026-92467 is an unverified password change vulnerability in the zlt2000 microservices-platform through version 6.0.0. This vulnerability allows authenticated users to change any account password without providing the current password by exploiting the PUT /users/password endpoint. Attackers can manipulate the request body to specify an arbitrary user ID and a new password, effectively overwriting cre [truncated]