CVE-2026-126373

The Vvveb software, versions 1.0.8.4 through 1.0.8.6 , is susceptible to an authorization bypass vulnerability within the content/revisions revision action. The root cause is that the revision() action fails to enforce an admin_id ownership restriction . This allows low-privileged Authors to acce...