Browse all 2 CVE security advisories affecting AlchemyCMS. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-86777 | AlchemyCMS before 7.4.16 and 8.x before 8.3.6 Missing Authorization on GET /api/nodes — alchemy_cms CWE-862 | 5.3 | Medium | 2026-09-09 |
| CVE-2026-23885 | AlchemyCMS has Authenticated Remote Code Execution (RCE) via eval injection in ResourcesHelper — alchemy_cms CWE-95 | 6.4 | Medium | 2026-01-19 |
This page lists every published CVE security advisory associated with AlchemyCMS. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.