{"id":86333,"date":"2026-01-20T15:58:17","date_gmt":"2026-01-20T15:58:17","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T06:00:00","slug":"cve-2025-46740-unauthorized-administrative-account-name-change","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-46740-unauthorized-administrative-account-name-change\/","title":{"rendered":"CVE-2025-46740: Unauthorized Administrative Account Name Change<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

CVE-2025-46740 is a significant security vulnerability that allows an authenticated user without administrative privileges to change the administrator Account Name. This vulnerability impacts any system or software that does not properly limit the account name changes to the appropriate user roles, potentially leading to system compromise or data leakage. The severity of this issue is underlined by its CVSS Severity Score of 7.5, indicating a high risk to affected systems.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-46740
\nSeverity: High (7.5)
\nAttack Vector: Network
\nPrivileges Required: Low
\nUser Interaction: Required
\nImpact: Unauthorised Administrative Account Name Change, which could lead to system compromise or data leakage.<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n