Skip to content
OpenAdvisories

Vendor

ThinkCMF

1 known vulnerabilities.

Products

ThinkCMF 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-111352

    ThinkCMF through 8.0.1 Incorrect Authorization in Admin REST API

    ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every admin REST API endpoint because Auth::check() fails open when no admin_api rule exists. Attackers w…

    ThinkCMF ThinkCMF