UNKNOWN NVD

CVE-2026-95263

Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A low-privilege backend administrator with administrator-update permission can change the password of

Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A low-privilege backend administrator with administrator-update permission can change the password of the built-in super administrator account. The server does not enforce protection for this account, and the update scenario does not require the old password.

References

https://github.com/liufee/cms
https://github.com/tao0845/CVE-Request/blob/main/CVE-2026-95263.md

Published: 2026-10-05 · Source: NVD · Feed updated: 2026-10-06

This unknown severity vulnerability was published on 2026-10-05 via NVD.

vulnfeed aggregates 7729 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.