Skip to content
OpenAdvisories

Vendor

Azuriom

2 known vulnerabilities.

Products

CMS 1 Azuriom CMS 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.1
    CVE-2026-19975 Public exploit

    Azuriom CMS Money Transfer ProfileController.php transferMoney toctou

    A weakness has been identified in Azuriom CMS up to 1.2.12. This issue affects the function transferMoney of the file app/Http/Controllers/ProfileController.php of the component Money Transfer Handler. This manipulation causes time-of-check time-of-use. The a…

    Azuriom CMS
  • High 8.1
    CVE-2026-54415 Public exploit

    Broken Access Control in Azuriom CMS Server Routes Allows Account Takeover

    Missing Authorization in the server management routes (routes/admin.php) in Azuriom Azuriom CMS before 1.2.11 on all platforms allows an authenticated attacker with the admin.access permission to create AzLink server tokens and take over non-admin user accoun…

    Azuriom Azuriom CMS