| Reporter | Title | Published | Views | Family All 25 |
|---|---|---|---|---|
 | CVE-2026-30945 | 10 Mar 202616:52 | – | attackerkb |
 | CVE-2026-30945 | 10 Mar 202611:12 | – | circl |
 | StudioCMS security vulnerabilities | 10 Mar 202600:00 | – | cnnvd |
 | Unspecified Vulnerability in StudioCMS (CNVD-2026-18154) | 17 Mar 202600:00 | – | cnvd |
 | CVE-2026-30945 StudioCMS: IDOR — Arbitrary API Token Revocation Leading to Denial of Service | 10 Mar 202616:52 | – | cvelist |
 | Exploit for CVE-2026-30945 | 11 Mar 202622:33 | – | githubexploit |
 | EUVD-2026-10557 | 11 Mar 202600:16 | – | euvd |
| EUVD-2026-10558 | 11 Mar 202600:16 | – | euvd |
 | StudioCMS: IDOR — Arbitrary API Token Revocation Leading to Denial of Service | 11 Mar 202600:16 | – | github |
 | CVE-2026-30945-PoC | 24 Oct 202602:16 | – | kitploit |
10
[
{
"vendor": "withstudiocms",
"product": "studiocms",
"versions": [
{
"version": "< 0.4.0",
"status": "affected"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| tokenID | request body | /studiocms_api/dashboard/api-tokens | In StudioCMS ≤ 0.3.0, this endpoint allows an authenticated user with editor privileges to revoke API tokens belonging to any other user (including admins/owners) because it fails to verify token ownership or role hierarchy. | CWE-639, CWE-863 |
| userID | request body | /studiocms_api/dashboard/api-tokens | In StudioCMS ≤ 0.3.0, this endpoint allows an authenticated user with editor privileges to revoke API tokens belonging to any other user (including admins/owners) because it fails to verify token ownership or role hierarchy. | CWE-639, CWE-863 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 10:33Current
5.9Medium risk
Vulners AI Score5.9
CVSS 3.17.1
EPSS0.00463
SSVC