CVE-2007-6487: Unspecified vulnerability in Plain Black WebGUI 7.4.0 through 7.4.17 allows remote authenticated users with...

Security readout for executives and security teams

Plain Black WebGUI 7.4.0 through 7.4.17 reportedly allowed a lower administrative role, Secondary Admin, to create full Admin accounts. This is an authenticated privilege escalation issue, not an unauthenticated internet takeover based on the provided sources. Exposure is limited to organizations still running Plain Black WebGUI 7.4.0 through 7.4.17 with Secondary Admin accounts or compromised Secondary Admin credentials. Treat as urgent for any remaining legacy WebGUI deployment. The issue can convert delegated admin access into full administrative control, but current business risk depends on whether this old software is still present. Mitigation focus: Inventory WebGUI deployments and versions.; Move affected 7.4.0 through 7.4.17 systems off vulnerable versions per vendor guidance.; Review the vendor WebGUI 7.4.18 stable release advisory..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.