CVE-2026-67207

creationtimestamp| type| source ---|---|--- 2026-07-30 21:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvdiobq3d2q 2026-07-31 12:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwxuv6omv24...

CVE-2026-67207 Wolf CMS 0.8.3.1 Authorization Bypass via BackupRestoreController

Wolf CMS through 0.8.3.1 contains an authorization bypass vulnerability in BackupRestoreController that allows authenticated non-administrative users to access restricted backup functionality due to a PHP operator precedence flaw in the permission check expression. Attackers can exploit the...