# CVE-2026-7167: Gaudire Assassin game improper authentication in email validation

Source: https://junglewise.ai/threats/cve-2026-7167-gaudire-assassin-game-improper-authentication-in-email-validation  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-22. Updated: 2026-06-22  
License: CC BY 4.0 with a link back

CVE-2026-7167 · Severity: info · CVSS 6.9 · Published 2026-06-22

Gaudire Assassin game is an interactive gaming platform. A security flaw allows users to register accounts using fake or unverified email addresses. This can lead to the mass creation of fraudulent accounts, which may be used for spam distribution, system abuse, or to bypass standard user controls.

Technologies: [Gaudire Assassin game](https://junglewise.ai/threats/technologies/assassin-game). Vendors: [Gaudire](https://junglewise.ai/threats/vendors/gaudire).

## Quick answers

**Is CVE-2026-7167 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-7167 being exploited in the wild.

**How severe is CVE-2026-7167?** Informational severity, with a CVSS score of 6.9, published 22 June 2026.

**Which products and versions are affected?** Gaudire Assassin game last version.

**Is there a fix for CVE-2026-7167?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-7167 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-7167?** Check whether you run Gaudire Assassin game at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability exists in the authentication process of Gaudire's Assassin game due to improper validation of the 'email' field. A remote, unauthenticated attacker can register accounts using arbitrary or fake email addresses because the system does not verify the ownership or validity of the provided address. This lack of validation facilitates the mass creation of fraudulent accounts. Once registered, an attacker can exploit the platform for spam distribution, system abuse, or to circumvent user management controls. As of the advisory date, no patch or solution has been reported.

## Affected products

- Gaudire Assassin game last version

## Timeline

- 2026-06-22: disclosed
- 2026-06-22: advisory

## References

- [https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-assassin-game-gaudire](https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-assassin-game-gaudire)

## Related threats

- [Gaudire Assassin game sensitive data exposure in API](https://junglewise.ai/threats/cve-2026-7166-gaudire-assassin-game-sensitive-data-exposure-in-api)
- [Gaudire Assassin game multiple vulnerabilities in /addJugador endpoint](https://junglewise.ai/threats/cve-2026-7165-gaudire-assassin-game-multiple-vulnerabilities-in-addjugador)