FlyCMS vulnerabilities

1 known vulnerability in FlyCMS from Sunkaifei. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  FlyCms: Use of Default Credentials

  CVE-2026-112296Oct 19, 2026Sunkaifei

  FlyCms through commit edfdf724 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain super administrator access via the flycms account with password admin123. Attackers can log in through POST /api/auth/login, solvin