Threats Tagged 'cve-2026-85381'

A medium-severity security vulnerability (CVE-2026-85381) has been identified in the light0011 CMS, specifically in the file App/Home/Controller/ChapterController.class.php within the Chapter Controller component. The vulnerability allows remote attackers to bypass authorization by manipulating the content argument. The product uses a rolling release model, so no specific affected or fixed versions are available. The issue was reported early to the project, but no response or patch has been provided yet. The vulnerability has been publicly disclosed, but no known exploits are currently active in the wild.

CVE-2026-85381 is an authorization bypass vulnerability in the light0011 cms affecting the Chapter Controller component. The issue arises from improper processing of an argument in the file App/Home/Controller/ChapterController.class.php, allowing remote attackers to bypass authorization controls. The product uses a rolling release model, so no specific affected or fixed versions are provided. The vulnerability has a CVSS 4.0 base score of 6.9 (medium severity). The vendor has been informed but has not yet responded or issued a fix. Public exploit details have been disclosed, but no known exploitation in the wild is reported.