CVE-2006-1026

CVE-2006-1026 describes a privilege escalation vulnerability in JFacets before version 0.2, allowing remote attackers to gain unauthorized access to any account. This is achieved by manipulating the profileID parameter within a GET request. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this decade-old vulnerability.