What’s Vulnerable › Vulnerabilities

CVE-2026-82602: SeaCMS ass.php authorization

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-31 · updated 2026-08-31
• Weakness: CWE-285

Description

A security vulnerability has been detected in SeaCMS up to 13.6. This vulnerability affects unknown code of the file /ass.php. The manipulation leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

Affected products

• SeaCMS: 13.0, 13.1, 13.2, 13.3, 13.4, 13.5 (+1)

References

• https://github.com/T-Chachamaru/seacms-13.6-security-advisories/blob/a084a3e573240d54860153321df271280daec262/c-011-ass-paywall-url-disclosure.md
• https://vuldb.com/cve/CVE-2026-82602
• https://vuldb.com/submit/892789
• https://vuldb.com/vuln/397104
• https://vuldb.com/vuln/397104/cti

Get alerted when CVE-2026-82602 or the next vulnerability affects your stack