CVE Intelligence

Liquidfiles vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Liquidfiles products: 1 record(s), with severity, exploitation and fixes.

Liquidfiles 1

Exploited only (KEV) →

CVE-2026-12673 Medium · 5.9 CWE-285 Jun 20, 2026
Improper Authorization in Liquidfiles
Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalation from an Admin in a secondary domain to a Sysadmin by modifying a group in their managed secondary (non-default) group.