CyberSecBulletin

Anchorcms vulnerabilities

We track 1 vulnerability in Anchorcms products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 10, 2026.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Anchorcms vulnerabilities

  • 8.8 High severity

    Anchor CMS: Missing Authorization

    CVE-2026-88959Anchorcms

    Anchor CMS through 0.12.7 fails to enforce role-based access control in admin user-management endpoints, allowing any authenticated low-privilege user to create administrator accounts or modify existing ones. Attackers with editor or user roles can POST direct