CVE-2026-71625
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
slimkit 旗下的 ThinkSNS+ v2.4 版本存在一个漏洞，允许远程攻击者通过 组件实现权限提升。
Possible ATT&CK Techniques 1 AI
T1078.003 · Local Accounts
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-71625
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2026-71625
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-71625
请登录查看更多情报信息。
Security Blog Posts for CVE-2026-71625 (1)
Other References for CVE-2026-71625 (1)
Same Patch Batch · n/a · 2026-09-04 · 43 CVEs total
| CVE-2026-75430 | 9.8 CRITICAL | PowerJob Worker 5.1.2 远程代码执行漏洞 |
| CVE-2026-75431 | 9.1 CRITICAL | PowerJob Server 5.1.2 JWT密钥可预测致远程代码执行 |
| CVE-2026-85401 | 6.3 MEDIUM | Dolibarr Legacy File Manager config.inc.php access control |
| CVE-2026-79391 | Trueview 6.0.23.4 MQTT服务未认证漏洞 | |
| CVE-2026-31020 | DocsGPT 0.15.0 服务端模板注入致RCE漏洞 | |
| CVE-2026-79389 | Trueview T18161 S 6.0.23.4 MQTT消息验证漏洞 | |
| CVE-2026-75439 | Free5GC v4.2.2 UPF组件远程拒绝服务漏洞 | |
| CVE-2026-79426 | CRMEB 6.0.0 任意文件删除漏洞 | |
| CVE-2026-79423 | SeaCMS v13.6管理配置组件RCE漏洞 | |
| CVE-2022-26961 | Italtel NetMatch-S 5.0.0 多个存储型XSS漏洞 | |
| CVE-2025-67066 | oasys sysoa 1.0 /outaddresspaging SQL注入 | |
| CVE-2026-50894 | easyadmin v2.0.2.2 任意文件上传漏洞 | |
| CVE-2026-71626 | Invoice Ninja v5.13.24 远程敏感信息泄露漏洞 | |
| CVE-2026-71624 | esoTalk 1.0.0g4 远程代码执行 | |
| CVE-2026-71622 | Zhao-github APiAdmin 5.0.1 User.php 组件 SQL注入漏洞 | |
| CVE-2026-78839 | MachForm v30任意文件上传导致代码执行 | |
| CVE-2026-71620 | ApiAdmin 5.0.1 文件上传导致远程代码执行 | |
| CVE-2021-44319 | Parrot AR.Drone 1/2 无线认证拒绝服务漏洞 | |
| CVE-2021-44320 | Parrot AR.Drone 1/2 存在DoS漏洞 | |
| CVE-2026-38961 | pfSense 26.03等RSS组件XSS漏洞 |
Showing top 20 of 43 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-71625
No comments yet