HIGH
Anchor CMS through 0.12.7 Privilege Escalation via Missing Authorization on Admin User-Management Endpoints
Published Sep 10, 2026
8.7
HIGHCVSS 4.0
EPSS 0.52%
Description
Anchor CMS through 0.12.7 fails to enforce role-based access control in admin user-management endpoints, allowing any authenticated low-privilege user to create administrator accounts or modify existing ones. Attackers with editor or user roles can POST directly to admin/users/add or admin/users/edit endpoints to create new administrator accounts or change the existing administrator's password, gaining full administrative access.
Affected products
-
- Version 0StatusaffectedConstraints<=0.12.7
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Anchorcms | Anchor CMS | unaffected |
|
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (5)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-75572 Advisory
- https://gist.github.com/bozorovab2009-spec/57931237f774b78333f8fe47e84ec4aa third-party-advisory
- https://github.com/anchorcms/anchor-cms product
- https://github.com/anchorcms/anchor-cms/blob/0.12.7/anchor/routes/users.php technical-description
- https://www.vulncheck.com/advisories/anchor-cms-through-0.12.7-privilege-escalation-via-missing-authorization-on-admin-user-management-endpoints third-party-advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-75572 | Advisory | |
| https://gist.github.com/bozorovab2009-spec/57931237f774b78333f8fe47e84ec4aa | third-party-advisory | |
| https://github.com/anchorcms/anchor-cms | product | |
| https://github.com/anchorcms/anchor-cms/blob/0.12.7/anchor/routes/users.php | technical-description | |
| https://www.vulncheck.com/advisories/anchor-cms-through-0.12.7-privilege-escalation-via-missing-authorization-on-admin-user-management-endpoints | third-party-advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulnCheck
Published Sep 10, 2026
Updated Sep 24, 2026
Reserved Sep 10, 2026
Link CVE-2026-88959
CISA Vulnrichment
Updated Sep 11, 2026
ENISA EUVD
EUVD-2026-75572 Assigner VulnCheck
Published Sep 10, 2026
Updated Sep 24, 2026
Exploited since n/a
Link EUVD-2026-75572