What’s Vulnerable › Vulnerabilities

CVE-2026-40043: Pachno 1.0.6 Authentication Bypass via runSwitchUser()

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-13 · updated 2026-10-26
• Weakness: CWE-639

Description

Pachno 1.0.6 contains an authentication bypass vulnerability in the runSwitchUser() action that allows authenticated low-privilege users to escalate privileges by manipulating the original_username cookie. Attackers can set the client-controlled original_username cookie to any value and request a switch to user ID 1 to obtain session tokens or password hashes belonging to administrator accounts.

Affected products

• pancho Pachno: 1.0.6

References

• https://www.vulncheck.com/advisories/pachno-authentication-bypass-via-runswitchuser
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5985.php
• https://www.zeroscience.mk/#/advisories/ZSL-2026-5985

Get alerted when CVE-2026-40043 or the next vulnerability affects your stack