CVE-2026-19975

CVE-2026-19975 affects Azuriom CMS up to version 1.2.12. The vulnerability targets the Money Transfer Handler, specifically the function transferMoney in app/Http/Controllers/ProfileController.php, enabling time-of-check time-of-use (TOCTOU) manipulation. The issue is exploitable remotely with a ...