CVE-2026-39774

Summary

The flaw allows unauthenticated users to escalate privileges to administrative level, which can lead to full system compromise.

Exploitability

Exploitation is relatively straightforward given the unauthenticated nature and high severity, requiring only network access to the affected Tourfic Pro version.

Blast radius

If exploited, the attacker could gain full control over the system, potentially leading to data theft, service disruption, and further lateral movement within the network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Tourfic Pro 1.17.4 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.