MinorCritical vulnerability
CVE-2026-104733 (CVSS 7.4)
NVD · officialPublished Oct 2, 2026Risk 23/100
User Impersonation in ProcessOnes XMMP Server ejabberd <= 26.04 allows an attacker to impersonate arbitrary users via unvalidated authzid parameter in SASL-PLAIN mechanism.
Technical details
CVSS
7.4
AV:NetworkAC:LowPR:LowUI:None
Evidence and sources
This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.
Open primary source