What is CVE-2026-2543?

CVE-2026-2543 is a low-severity vulnerability in Vichan-Devel Vichan, classified under CWE-620. CVSS score: 2.7/10. Published 2026-02-16.

How severe is CVE-2026-2543?

Low severity. CVSS v3 base score is 2.7 out of 10.

Vulnerability in Vichan-Devel Vichan

CVE-2026-2543

A vulnerability was identified in vichan-devel vichan up to 5.1.5. This vulnerability affects unknown code of the file inc/mod/pages.php of the component Password Change Handler. The manipulation of the argument Password leads to unverified password change. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

EPSS: 0.003 (19.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 2.7 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N.

Affected products

Vichan-devel Vichan — versions 5.1.0, 5.1.1, 5.1.2

Weakness classification (CWE)

References

cna@vuldb.com (technical-description, vdb-entry)
cna@vuldb.com (signature, permissions-required)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (related)

Frequently asked questions

What is CVE-2026-2543?: CVE-2026-2543 is a low-severity vulnerability in Vichan-Devel Vichan, classified under CWE-620. CVSS score: 2.7/10. Published 2026-02-16.
How severe is CVE-2026-2543?: Low severity. CVSS v3 base score is 2.7 out of 10.