EFAK vulnerabilities

1 known vulnerability in EFAK from Smartloli. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  EFAK: Missing Authorization

  CVE-2026-111681Oct 16, 2026Smartloli

  EFAK through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to manage accounts because the /api/users endpoints lack administrator role checks. Attackers can send POST, PUT, or DELETE requests to UserControll