Skip to content
OpenAdvisories

Product · Azuriom

Azuriom CMS

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-54415 Public exploit

    Broken Access Control in Azuriom CMS Server Routes Allows Account Takeover

    Missing Authorization in the server management routes (routes/admin.php) in Azuriom Azuriom CMS before 1.2.11 on all platforms allows an authenticated attacker with the admin.access permission to create AzLink server tokens and take over non-admin user accoun…