Executive brief
CI4MS: Account Deletion Module Grants Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw)
Affected products
- Packagist ci4-cms-erp/ci4ms
Junglewise Threat Intelligence
CVE-2026-34570: CI4MS: Account Deletion Module Grants Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw)
CVE-2026-34570 · Severity: low · CVSS 3.1 · Published 2026-04-01
Technologies: ci4-cms-erp/ci4ms (Packagist). Vendors: Packagist.