CVE-2026-13544

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-13544
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-13544.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-13544
Published
2026-06-29T06:45:07.860Z
Modified
2026-07-15T01:49:19.088071335Z
Severity
  • 2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
Feehi CMS API users access control
Details

A flaw has been found in Feehi CMS up to 2.1.1. Affected by this issue is some unknown functionality of the file /api/users of the component API. This manipulation causes improper access controls. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Database specific 
{
    "cwe_ids": [
        "CWE-266",
        "CWE-284"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/13xxx/CVE-2026-13544.json",
    "cna_assigner": "VulDB"
}
References

Affected packages

Git / github.com/liufee/cms

Affected ranges

Type
GIT
Repo
https://github.com/liufee/cms
Events
Introduced
819254cebbc0ed98c6569325957f2eca390c625b
Last affected
a5198f0f34a0aedd87d9b2f8cb09d0a0a88bcd09
Database specific 
{
    "extracted_events": [
        {
            "introduced": "2.1.0"
        },
        {
            "last_affected": "2.1.0"
        },
        {
            "introduced": "2.1.1"
        },
        {
            "last_affected": "2.1.1"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

2.*
2.1.0
2.1.0.1
2.1.0.2
2.1.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-13544.json"