8.8
High
CVE-2026-112242 Incorrect Privilege Assignment vulnerability in Cozmoslabs Profile Builder profile-builder allows Privilege…
Description
Incorrect Privilege Assignment vulnerability in Cozmoslabs Profile Builder profile-builder allows Privilege Escalation.This issue affects Profile Builder: from n/a through 4.0.4.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Profile Builder 4.0 | earliest → 4.0.4 | No fix stated |
Other CVEs of Profile Builder
The 8 CVEs of Profile Builder →
CVE-2026-54855
Unauthenticated Cross Site Scripting (XSS) in Profile Builder <= 4.0.5 versions
7.1
High
CVE-2026-54854
Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions
6.3
Medium
CVE-2026-54853
Missing Authorization vulnerability in Cozmoslabs Profile Builder profile-builder allows Exploiting Incorrectly…
5.3
Medium
CVE-2026-96338
Subscriber Cross Site Scripting (XSS) in Profile Builder <= 4.0.2 versions
6.5
Medium