CVE-2016-3169

CVE-2016-3169 is a privilege escalation vulnerability affecting Drupal 6.x before 6.38 and 7.x before 7.43. It allows remote attackers to gain elevated privileges by exploiting contributed or custom code that improperly uses the user_save function with an explicit category and loads all roles. With a CVSS score of 8.1 (HIGH), this vulnerability has a network attack vector, high attack complexity, and can lead to high impacts on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.