Threats Tagged 'cve-2026-8737'
View all threats tagged with 'cve-2026-8737'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-8737'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-8737 is a medium severity vulnerability in Sanluan PublicCMS version 5.202506.d. It involves missing authentication in the Trade Address Query Handler component, specifically in the execute function of TradeAddressListDirective.java. Manipulating the userId or id argument can bypass authentication checks, allowing remote attackers to exploit this weakness. The vendor has not responded to the disclosure, and no official patch or remediation guidance is currently available. Public exploit code exists, but no known exploitation in the wild has been reported. Join the discussion | CVE Database V5 | 05/17/2026, 06:45:12 UTC Added: 05/17/2026, 07:22:09 UTC |
Showing 1 to 1 of 1 result