CVE-2026-111673 - IceCMS through 4.1.5 Missing Authentication via /User Administrative Endpoints
CVE ID :CVE-2026-111673 Published : Oct. 16, 2026, 6:17 p.m. | 1 hour, 16 minutes ago Description :IceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated attackers to modify, delete, or disable any account because /User/** is excluded from the Shiro...