CVE-2026-112905

The Vvveb CMS (versions prior to 1.0.8.7 ) is vulnerable to an Insecure Direct Object Reference (IDOR) on the admin/auth-token endpoint. This vulnerability allows an authenticated administrator to read and overwrite the API tokens of other administrators, potentially leading to admin privilege es...