CVE-2026-35447— NamelessMC: Private or blocking profile pages can be bypassed with direct POST requests, and reply handling allows cross-profile writes

AI Predicted 5.3 Difficulty: Moderate Updated Jun 03, 2026

Possible ATT&CK Techniques 1AI

Affected Version Matrix 1

Vendor	Product	Version Range	Status
NamelessMC	Nameless	`= 2.2.4`	affected

Updated Jun 03, 2026

Get alerts for future matching vulnerabilitiesLog in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

NamelessMC: Private or blocking profile pages can be bypassed with direct POST requests, and reply handling allows cross-profile writes

Source: NVD (National Vulnerability Database)

Vulnerability Description

NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page (modules/Core/pages/profile.php) processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to write wall posts to private or blocking profiles. Additionally, the reply branch does not verify that the target wall post belongs to the current profile, enabling attackers to inject replies into arbitrary wall posts owned by other profiles via a restricted profile URL. This is patched in version 2.2.5.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

通过发送数据的信息暴露

Source: NVD (National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
NamelessMC	Nameless	= 2.2.4	-

II. Public POCs for CVE-2026-35447

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2026-35447

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-35447 (1)

🔗 Private or blocking profile pages can be bypassed with direct POST requests, and reply handling allows cross-profile writes · Advisory · NamelessMC/Nameless · GitHub Read full article x_refsource_CONFIRM

https://nvd.nist.gov/vuln/detail/CVE-2026-35447

Same Patch Batch · NamelessMC · 2026-06-02 · 7 CVEs total

CVE-2026-34460	5.4 MEDIUM	NamelessMC: OAuth callback `state` is not validated, allowing login CSRF / session swappin
CVE-2026-32250	4.3 MEDIUM	NamelessMC has Reflected Cross-Site Scripting (XSS) in id parameter of /index.php?route=/q
CVE-2026-33398		Authenticated users can read hidden forum posts through `/forum/get_quotes`
CVE-2026-35443		NamelessMC: Forum reactions bypass the "view own topics only" restriction
CVE-2026-40314		NamelessMC: Reactions on private or blocking profile posts can be read and modified withou
CVE-2026-40571		NamelessMC: Reactions on private or blocking profile posts can be modified without proper

IV. Related Vulnerabilities

Same product: Nameless

Same vendor: NamelessMC

Same weakness: CWE-201

V. Comments for CVE-2026-35447

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-35447— NamelessMC: Private or blocking profile pages can be bypassed with direct POST requests, and reply handling allows cross-profile writes

Possible ATT&CK Techniques 1AI

Affected Version Matrix 1

I. Basic Information for CVE-2026-35447

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2026-35447

III. Intelligence Information for CVE-2026-35447

Vendor Advisories for CVE-2026-35447 (1)

Same Patch Batch · NamelessMC · 2026-06-02 · 7 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2026-35447

Leave a comment