{"id":"CVE-2026-111708","title":"WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup","summary":"WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup. Attackers can omit the profile field or set it to …","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-269"],"vendor":"canove","product":"whaticket-community","affected":["whaticket-community <= cf047955a6f0d07002ed89c67d765c28d06f8d52"],"published":"2026-10-16","updated":"2026-10-16","sourceUpdated":"2026-10-16T20:17:22.847","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-111708","references":[{"url":"https://github.com/canove/whaticket-community","label":"disclosure@vulncheck.com"},{"url":"https://github.com/canove/whaticket-community/blob/cf047955a6f0d07002ed89c67d765c28d06f8d52/backend/src/controllers/UserController.ts#L29-L48","label":"disclosure@vulncheck.com"},{"url":"https://github.com/canove/whaticket-community/blob/cf047955a6f0d07002ed89c67d765c28d06f8d52/backend/src/services/UserServices/CreateUserService.ts#L23-L65","label":"disclosure@vulncheck.com"},{"url":"https://hackmd.io/@hieuPenguinnn/whaticket-community-signup-eop-ticket-idor","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/whaticket-community-through-commit-cf04795-admin-self-registration-via-auth-signup","label":"disclosure@vulncheck.com"},{"url":"https://hackmd.io/@hieuPenguinnn/whaticket-community-signup-eop-ticket-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"epss":0.00578,"epssPercentile":0.47399,"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"total","timestamp":"2026-10-16T19:45:23.016825Z"},"ingestedAt":"2026-10-16T18:43:08.642Z","slug":"CVE-2026-111708","body":"## Overview\n\nWhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup. Attackers can omit the profile field or set it to admin, gaining user management, settings, and access to all tickets, contacts, messages, and WhatsApp connections.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":66,"depthScoreParts":{"impact":53.9,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":223387,"id":"CVE-2026-111708","ts":1792183972733,"field":"exploit_available","old":"false","new":"true"}]}