Live › vulnerability › CVE-2026-116623
Go to dashboardSimple Content Management System 1.0 by code-projects has a flaw in its admin welcome page (web/admin/welcome.php) where the addnews argument is processed without an authorization check. A remote attacker can use the public exploit to perform admin-level actions such as adding news entries.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 01:34 UTC. All times on this page are UTC.
Sites running the code-projects Simple Content Management System 1.0 with its admin interface reachable from the network are likely affected. Installations where the admin directory is blocked from outside access or that do not run this project can skip it. unknown whether the sources list a patched release.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.
This page as .md · .json · in your agent: get_signal("CVE-2026-116623")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.