Vulnerability Description
The frontend topic editing flow does not verify on the server side that the requesting visitor owns the topic being modified. As a result, a visitor who knows the identifier of a topic from the public forum can submit a modified update request for that topic directly and overwrite its content, without the application confirming ownership. Topic identifiers are visible in the public forum listing, and exploitation requires no privileged access or non-default configuration.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-77143?
CVE-2026-77143 is a documented vulnerability. The frontend topic editing flow does not verify on the server side that the requesting visitor owns the topic being modified. As a result, a visitor who knows the identifier of a topic from the public...
How severe is CVE-2026-77143?
CVSS scoring is not yet available for CVE-2026-77143. Check NVD for updates.
Is there a patch for CVE-2026-77143?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.