CVE ID :CVE-2026-111352 Published : Oct. 15, 2026, 10:19 p.m. | 1 hour, 14 minutes ago Description :ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every admin REST API endpoint because...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-111352 - ThinkCMF through 8.0.1 Incorrect Authorization in Admin REST API

VERWANDTEARTIKEL

CVE-2026-75941 - Lenovo Legion Zone Remote Code Execution Vulnerability

CVE-2026-111366 - cool-admin-midway through 8.0.0 Authorization Bypass via /admin/sys/user Endpoints

CVE-2026-111356 - MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force

CVE-2026-111347 - go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd

CVE-2026-111329 - JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console

CVE-2026-111330 - JuggleIM im-server through 1.8.16 Weak Password Hashing via Unsalted SHA-1