CVE-2026-107637: Authorization Bypass Through User-Controlled Key in ph7software ph7builder
Description
pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper authorization vulnerability in the note module delete() action that allows authenticated members to delete other members' note comments and categories. Attackers can submit another member's note ID in the POST id parameter to remove all comments and category associations, since those queries lack profile ID checks.
CVSS v4.0
Score 5.3medium
Affected software
ph7software
ph7builder
pkg:github/ph7software/pH7-Social-Dating-CMSRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-107637 describes an improper authorization vulnerability in pH7Builder (pH7 Social Dating CMS) prior to version 18.5.0. The flaw exists in the note module's delete() action, where authenticated members can delete note comments and category associations belonging to other users by supplying a different member's note ID in the POST 'id' parameter. This occurs because the deletion queries do not verify the profile ID ownership, allowing unauthorized deletion of data.
Potential Impact
An authenticated user can delete note comments and category associations of other members, potentially leading to data loss or disruption of user content. The vulnerability does not allow privilege escalation beyond authenticated user level or remote code execution, but it compromises data integrity within the affected module.
Mitigation Recommendations
Upgrade pH7Builder to version 18.5.0 or later, where this authorization issue has been fixed. No other mitigation guidance is provided. Patch status is confirmed by the version boundary in the affectedVersions field.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-10-08T14:06:00.033Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ac7a6672cdf04f6561df63c
Added to database: 10/08/2026, 14:19:19 UTC
Last enriched: 10/08/2026, 14:35:11 UTC
Last updated: 10/08/2026, 15:19:06 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.