What’s Vulnerable › Vulnerabilities

CVE-2026-116623: code-projects Simple Content Management System Admin welcome.php authorization

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-27 · updated 2026-10-31
• Weakness: CWE-862

Description

A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.

Affected products

• code-projects Simple Content Management System: 1.0

References

• https://code-projects.org/
• https://github.com/YoonSunWoo02/CVE-simple-cms-broken-access-control
• https://vuldb.com/cve/CVE-2026-116623
• https://vuldb.com/submit/1024407
• https://vuldb.com/vuln/426553
• https://vuldb.com/vuln/426553/cti
• https://github.com/YoonSunWoo02/CVE-simple-cms-broken-access-control

Get alerted when CVE-2026-116623 or the next vulnerability affects your stack