CVE-2026-129455

The Zr.Admin.NET project (commits e6ceaf4 through eb9228a ) contains an Insecure Direct Object Reference (IDOR) vulnerability within the FrontArticleController component. This flaw allows authenticated users to manipulate the visibility and pin state of articles belonging to other users. Specific...