CVE-2024-36523

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-06-12 · updated 2026-06-17
Weakness: CWE-613

Description

An access control issue in Wvp GB28181 Pro 2.0 allows users to continue to access information in the application after deleting their own or administrator accounts. This is provided that the users do not log out of their deleted accounts.

Affected products

Wvp-Pro Gb28181: 2.0

References

https://github.com/648540858/wvp-GB28181-pro/issues/1456
https://github.com/648540858/wvp-GB28181-pro/issues/1456

Get alerted when CVE-2024-36523 or the next vulnerability affects your stack