Lucene search
K

8 matches found

OSV
OSV
added 2026/03/09 3:15 a.m.2 views

CVE-2026-3794

A vulnerability was identified in doramart DoraCMS 3.0.x. This issue affects some unknown processing of the file /api/v1/mail/send of the component Email API. Such manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit is publicly available and...

9.8CVSS5.4AI score
Exploits0References3
NVD
NVD
added 2026/03/09 3:15 a.m.3 views

CVE-2026-3794

A vulnerability was identified in doramart DoraCMS 3.0.x. This issue affects some unknown processing of the file /api/v1/mail/send of the component Email API. Such manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit is publicly available and...

9.8CVSS0.0014EPSS
Exploits1References3
CVE
CVE
added 2026/03/09 1:32 a.m.8 views

CVE-2026-3794

Doramart DoraCMS 3.0.x is affected in the Email API component (/api/v1/mail/send) where improper authentication can be exploited remotely. Public exploit available; vendor did not respond to disclosure. Connected sources (CVE listings, Red Hat/EUVD/NVD mirrors, AttackersKB) confirm remote access ...

9.8CVSS6.7AI score0.0014EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2026/03/09 1:32 a.m.31 views

CVE-2026-3794 doramart DoraCMS Email API send improper authentication

A vulnerability was identified in doramart DoraCMS 3.0.x. This issue affects some unknown processing of the file /api/v1/mail/send of the component Email API. Such manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit is publicly available and...

7.5CVSS0.0014EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/03/09 1:32 a.m.2 views

CVE-2026-3794 doramart DoraCMS Email API send improper authentication

A vulnerability was identified in doramart DoraCMS 3.0.x. This issue affects some unknown processing of the file /api/v1/mail/send of the component Email API. Such manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit is publicly available and...

7.5CVSS5.4AI score0.0014EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/03/09 1:32 a.m.3 views

CVE-2026-3794

A vulnerability was identified in doramart DoraCMS 3.0.x. This issue affects some unknown processing of the file /api/v1/mail/send of the component Email API. Such manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit is publicly available and...

9.8CVSS6.7AI score0.0014EPSS
Exploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/09 12:0 a.m.7 views

PT-2026-23999

Name of the Vulnerable Software and Affected Versions doramart DoraCMS versions 3.0.x Description A flaw exists in the processing of the /api/v1/mail/send file within the Email API component. This improper handling results in insufficient authentication. Remote attackers can exploit this issue. T...

9.8CVSS7.1AI score0.0014EPSS
Exploits1References11
CNNVD
CNNVD
added 2026/03/09 12:0 a.m.3 views

DoraCMS 授权问题漏洞

DoraCMS is an open-source application developed by DoraCMS. It is a content management system built using Node.js, eggjs, and MongoDB. Version 3.0.x of DoraCMS has a vulnerability related to authorization. This vulnerability stems from improper handling of files/api/v1/mail/send, which may lead t...

9.8CVSS7.1AI score0.0014EPSS
Exploits1References4
Rows per page
Query Builder