CyberSecBulletin

Azuriom vulnerabilities

We track 2 vulnerabilities in Azuriom products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 17, 2026.

2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score

Latest Azuriom vulnerabilities

  • 8.1 High severity

    Azuriom CMS: Improper Privilege Management

    CVE-2026-54415Azuriom

    Missing Authorization in the server management routes (routes/admin.php) in Azuriom Azuriom CMS before 1.2.11 on all platforms allows an authenticated attacker with the admin.access permission to create AzLink server tokens and take over non-admin user account

  • 8.8 High severity

    Azuriom: Improper Control of Generation of Code

    CVE-2025-65271Azuriom

    Client-side template injection (CSTI) in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard components that render untrusted user inpu