Beveiligingsadvies

CVE-2026-54415

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-17 14:04:59

Laatst bijgewerkt 2026-08-10 11:44:04

Toegewezen door TuranSec

CVSS-score 8.6

Status PUBLISHED

Beschrijving

Missing Authorization in the server management routes (routes/admin.php) in Azuriom Azuriom CMS before 1.2.11 on all platforms allows an authenticated attacker with the admin.access permission to create AzLink server tokens and take over non-admin user accounts by changing their passwords and email addresses via crafted HTTP requests to /admin/servers/create and the AzLink API endpoints (/api/azlink/password, /api/azlink/email, /api/azlink/user/{id}).

← Alle CVE's bekijken Bekijk op cve.org ↗