Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-88959— Anchor CMS through 0.12.7 Privilege Escalation via Missing Authorization on Admin User-Management Endpoints

Quick assessment

Affected
anchorcms Anchor CMS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Anchor CMS 版本 0.12.7 及之前版本在管理员用户管理接口中未能强制执行基于角色的访问控制（RBAC），使得任何已认证的低权限用户均能创建管理员账户或修改现有管理员账户。拥有“编辑”或“普通用户”角色的攻击者可以直接向 或 接口发送 POST 请求，从而创建新的管理员账户或修改现有管理员的密码，进而获得完整的管理员权限。

CVSS 8.8 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-88959

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Anchor CMS through 0.12.7 Privilege Escalation via Missing Authorization on Admin User-Management Endpoints
Source: CVE Program / CVE List V5
Vulnerability Description
Anchor CMS through 0.12.7 fails to enforce role-based access control in admin user-management endpoints, allowing any authenticated low-privilege user to create administrator accounts or modify existing ones. Attackers with editor or user roles can POST directly to admin/users/add or admin/users/edit endpoints to create new administrator accounts or change the existing administrator's password, gaining full administrative access.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
anchorcms Anchor CMS 0 ~ 0.12.7 -

II. Public POCs for CVE-2026-88959

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-88959

请登录查看更多情报信息。

Other References for CVE-2026-88959 (4)

IV. Related Vulnerabilities

Same weakness: CWE-862

V. Comments for CVE-2026-88959

No comments yet

Leave a comment