Logo
Retour à la veille

CVE-2026-86307

Publié : 7 septembre 2026
Modifié : 7 septembre 2026
Lien officiel NVD
Score CVSS
4.3
MEDIUM

Description détaillée

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Références et Patchs

https://github.com/light0011/cms/https://github.com/light0011/cms/issues/12https://vuldb.com/cve/CVE-2026-86307https://vuldb.com/submit/894818https://vuldb.com/vuln/399480https://vuldb.com/vuln/399480/cti

Dernières Vulnérabilités

CVE-2026-86506

In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed profiling data

VOIR DÉTAILS

CVE-2026-86505

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace

VOIR DÉTAILS

CVE-2026-86504

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution

VOIR DÉTAILS