CVE-2026-36720 - Insecure permissions in bookcars v8.3 allows authenticated attackers to escalate privileges from user to admin via modifying their user type

HIGH

Insecure permissions in bookcars v8.3 allows authenticated attackers to escalate privileges from user to admin via modifying their user type

Published Jun 9, 2026

8.1

HIGH

CVSS 3.1

EPSS 0.35%

Insecure permissions in bookcars v8.3 allows authenticated attackers to escalate privileges from user to admin via modifying their user type.

No remediation recorded yet.

Weaknesses (1)

CWE-284

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-35922		Advisory
https://github.com/CC-T-454455/Vulnerabilities/tree/master/bookcars/vulnerability-3		exploit

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jun 9, 2026

Updated Jun 9, 2026

Reserved Apr 6, 2026

Updated Jun 9, 2026

Status Deferred

Modified Jul 23, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Jun 9, 2026

Updated Jun 9, 2026

Exploited since n/a