The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged remote user can exploit this vulnerability to delete other users, including those with higher privileges.CreditsABB AGReferenceshttps://www.certvde.com/en/advisories/VDE-2026-056/