https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T21:40:45.040662+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-180120 EUVD-2026-180120 2026-10-23T21:40:45.132001+00:00 EUVD-2026-180120 https://cve.radiocsirt.org/vuln/fkie_cve-2011-2674 fkie_cve-2011-2674 2026-10-23T21:40:45.132038+00:00

BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-6wr6-54mw-mvhr GHSA-6wr6-54mw-mvhr — BaserCMS privilege escallation 2026-10-23T21:40:45.132070+00:00

Affected: Packagist: baserproject/basercms

BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2011-2674 gsd-2011-2674 2026-10-23T21:40:45.132094+00:00 gsd-2011-2674 https://cve.radiocsirt.org/vuln/jvndb-2011-000066 jvndb-2011-000066 2026-10-23T21:40:45.132106+00:00

BaserCMS contains a vulnerability in access restriction. BaserCMS is an open-source Contents Management System (CMS). BaserCMS contains a vulnerability in access restriction where adding a user in the user group "operators" which is created by default when BaserCMS is installed. Masako Ohno reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.