https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T17:45:38.798373+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-262617 EUVD-2026-262617 2026-10-06T17:45:38.852065+00:00 EUVD-2026-262617 https://cve.radiocsirt.org/vuln/fkie_cve-2025-59111 fkie_cve-2025-59111 2026-10-06T17:45:38.852108+00:00

Windu CMS is vulnerable to Broken Access Control in user editing functionality. Malicious attacker can send a GET request which allows privileged users to delete Super Admins which is not possible with GUI.

Only version 4.1 was tested and confirmed as vulnerable. This issue was fixed in version 4.1 build 2250.

 https://cve.radiocsirt.org/vuln/ghsa-4gm3-j7hq-575w GHSA-4gm3-j7hq-575w 2026-10-06T17:45:38.852145+00:00

Windu CMS is vulnerable to Broken Access Control in user editing functionality. Malicious attacker can send a GET request which allows privileged users to delete Super Admins which is not possible with GUI.

The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 4.1 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.