Lucene search
+L

6 matches found

NVD
NVD
•added 2026/10/16 6:17 p.m.•5 views

CVE-2026-111655

ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with...

5.1CVSS0.00247EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/16 5:39 p.m.•7 views

EUVD-2026-103077

ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with...

5.1CVSS5.9AI score0.00247EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/10/16 5:39 p.m.•2 views

CVE-2026-111655 ThinkAdmin think-plugs-admin through 1.0.81 IDOR via admin/file.edit

ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with...

5.1CVSS5.9AI score
SaveExploits0References8
Cvelist
Cvelist
•added 2026/10/16 5:39 p.m.•25 views

CVE-2026-111655 ThinkAdmin think-plugs-admin through 1.0.81 IDOR via admin/file.edit

ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with...

5.1CVSS0.00247EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/16 5:39 p.m.•12 views

CVE-2026-111655

The ThinkAdmin think-plugs-admin software (through version 1.0.81 ) is vulnerable to an Insecure Direct Object Reference (IDOR) flaw. The issue exists in the admin/file.edit endpoint, where non-super administrators can read or overwrite file records belonging to other administrators. By requestin...

5.1CVSS5.9AI score0.00247EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/16 12:00 a.m.•9 views

PT-2026-116054

🚨 CVE-2026-111655 ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POS...

5.1CVSS5.9AI score0.00247EPSS
SaveExploits0References7
Rows per page
Query Builder