CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2026-10-30
Critical Authentication Bypass in Vvveb CMS Password Reset (CVE-2026-110799)
[Affected Scope] All websites and e-commerce stores running Vvveb CMS versions prior to 1.0.8.7
[Impact] Remote attackers can bypass authentication to reset any user's password, leading to full account takeover including administrative privileges.
[Mitigation] Immediately upgrade Vvveb CMS to version 1.0.8.7 or later.