CVE-2026-29597 describes an improper access control vulnerability in DDSN Interactive cm3 Acora CMS version 10.7.1. An attacker with editor privileges can bypass intended restrictions by force browsing the /Admin/file_manager/file_details.asp endpoint and manipulating the file parameter to retrieve sensitive configuration files such as cm3.xml. The exposed information includes system administrator credentials, SMTP settings, and database credentials, which can be leveraged for privilege escalation, account takeover, and broader system compromise. This vulnerability is classified under CWE-284 (Improper Access Control) and has a CVSS 3.1 base score of 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). No patch or official remediation has been provided yet, and no known exploits are reported in the wild.

The vulnerability allows an editor-privileged user to access sensitive configuration files containing credentials and settings critical to system security. Exposure of these details can lead to full administrative control of the CMS, unauthorized access to email services, compromise of backend databases, lateral movement within the network, and persistent attacker presence. Although the vulnerability requires editor-level privileges, the impact on confidentiality is high, while integrity and availability are not directly affected according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict editor privileges to trusted users only and monitor for suspicious activity involving the /Admin/file_manager/file_details.asp endpoint. Consider implementing additional access controls or web application firewall rules to block unauthorized file parameter manipulation targeting this endpoint.