CVE-2026-54415

creationtimestamp| type| source ---|---|--- 2026-06-17 17:57:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiv74u5gc2t 2026-06-18 12:08:27+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3moks6clrea23 2026-07-13 22:00:12+00:00| seen|...

CVE-2026-54415 Broken Access Control in Azuriom CMS Server Routes Allows Account Takeover

Missing Authorization in the server management routes routes/admin.php in Azuriom Azuriom CMS before 1.2.11 on all platforms allows an authenticated attacker with the admin.access permission to create AzLink server tokens and take over non-admin user accounts by changing their passwords and email...