CVE-2026-116623 is a vulnerability in code-projects Simple Content Management System version 1.0. It involves missing authorization in the admin interface component, specifically in the /web/admin/welcome.php file. The flaw arises from manipulation of the 'addnews' argument, allowing remote attackers to exploit the system without proper authorization. Public exploit code is available. The vulnerability has a medium severity rating with a CVSS score of 6.9.