CVE-2026-120185
4.7 MEDIUMPublished 2026-10-31 · Updated 2026-10-31
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A security flaw has been discovered in ken678 YznCMS up to 2.2.0. The affected element is the function Backend of the file app/admin/controller/auth/Group.php of the component Auth Group Handler. Performing a manipulation results in improper privilege management. The attack can be initiated remotely. Upgrading to version 2.2.1 is sufficient to fix this issue. The patch is named ed16cd7f7f73e0316ffa8a148d. You should upgrade the affected component.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-266, CWE-269
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-101860PoC
- MEDIUMCVE-2026-108825PoC
- MEDIUMCVE-2026-108835
- MEDIUMCVE-2026-109143PoC
- MEDIUMCVE-2026-116223PoC
- MEDIUMCVE-2026-116471
- UNSCOREDCVE-2026-63349PoC
- LOWCVE-2026-93968PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.