Anchor CMS vulnerabilities

1 known vulnerability in Anchor CMS from Anchorcms. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Anchor CMS: Missing Authorization

  CVE-2026-88959Sep 10, 2026Anchorcms

  Anchor CMS through 0.12.7 fails to enforce role-based access control in admin user-management endpoints, allowing any authenticated low-privilege user to create administrator accounts or modify existing ones. Attackers with editor or user roles can POST direct