Sunkaifei
Sunkaifei Security Releases - October 2026
sunkaifei-2026-10 Oct 1, 2026 Source: Vendor
Sunkaifei security advisories for October 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-112294
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
3 lines
Showing 1–3 of 3 matching , clear filters
CVE-2026-112294
BR2026-0000-040191
FlyCms
unclaimed
FlyCms through commit edfdf724 contains a missing authorization vulnerability in ActionService.counter() that allows authenticated users to modify other users' content rows because checkRowOwner ne...
Credited as ikram-4
CVE-2026-112295
BR2026-0000-040192
FlyCms
unclaimed
FlyCms through commit edfdf724 contains a mass assignment vulnerability that allows authenticated users to overwrite protected account columns by submitting extra User bean fields to /ucenter/accou...
Credited as ikram-4
CVE-2026-112296
BR2026-0000-040193
FlyCms
unclaimed
FlyCms through commit edfdf724 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain super administrator access via the flycms account with password admi...
Credited as ikram-4