CVE-2026-111114Published
Nexter Extension <= 4.7.11 - Authenticated (Subscriber+) Privilege Escalation to 'reset-view' Parameter
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-111114 · Microsoft / collected KEV context
cve-program · CVE-2026-111114
- https://www.wordfence.com/threat-intel/vulnerabilities/id/ae86441d-5a95-45a7-869a-9e7872365a1f?source=cve
- https://plugins.trac.wordpress.org/browser/nexter-extension/tags/4.7.11/include/panel-settings/extensions/nexter-ext-view-admin-role.php#L287
- https://plugins.trac.wordpress.org/browser/nexter-extension/tags/4.7.11/include/panel-settings/extensions/nexter-ext-view-admin-role.php#L265
- https://plugins.trac.wordpress.org/browser/nexter-extension/tags/4.7.11/include/panel-settings/extensions/nexter-ext-view-admin-role.php#L51
- https://plugins.trac.wordpress.org/browser/nexter-extension/tags/4.7.11/include/panel-settings/extensions/nexter-ext-view-admin-role.php#L302
- https://plugins.trac.wordpress.org/changeset/3740891/nexter-extension/trunk/include/panel-settings/extensions/nexter-ext-view-admin-role.php
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.