{"id":"CVE-2026-111708","title":"WhaTicket Community through commit cf04795 Admin Self-Registration via /auth/signup","summary":"WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup. Attackers can omit the profile field or set it to …","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-269"],"vendor":"canove","product":"whaticket-community","affected":["whaticket-community <= cf047955a6f0d07002ed89c67d765c28d06f8d52"],"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"total","timestamp":"2026-10-16T19:45:23.016825Z"},"exploitAvailable":true,"published":"2026-10-16","updated":"2026-10-16","sourceUpdated":"2026-10-16T19:45:36.979Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-111708","references":[{"url":"https://hackmd.io/@hieuPenguinnn/whaticket-community-signup-eop-ticket-idor"},{"url":"https://github.com/canove/whaticket-community/blob/cf047955a6f0d07002ed89c67d765c28d06f8d52/backend/src/services/UserServices/CreateUserService.ts#L23-L65"},{"url":"https://github.com/canove/whaticket-community/blob/cf047955a6f0d07002ed89c67d765c28d06f8d52/backend/src/controllers/UserController.ts#L29-L48"},{"url":"https://github.com/canove/whaticket-community"},{"url":"https://www.vulncheck.com/advisories/whaticket-community-through-commit-cf04795-admin-self-registration-via-auth-signup","label":"VulnCheck Advisory: WhaTicket Community through commit cf04795 Admin Self-Registration via /auth/signup"}],"tags":["cve.org","exploit-available"],"ingestedAt":"2026-10-16T18:43:08.642Z","slug":"CVE-2026-111708","body":"## Overview\n\nWhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup. Attackers can omit the profile field or set it to admin, gaining user management, settings, and access to all tickets, contacts, messages, and WhatsApp connections.\n\n## Affected\n\n- `whaticket-community <= cf047955a6f0d07002ed89c67d765c28d06f8d52`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":66,"depthScoreParts":{"impact":53.9,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[{"seq":223387,"id":"CVE-2026-111708","ts":1792183972733,"field":"exploit_available","old":"false","new":"true"}]}