https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-20T08:19:57.840226+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-112296 fkie_cve-2026-112296 2026-10-20T08:19:57.910675+00:00

FlyCms through commit edfdf724 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain super administrator access via the flycms account with password admin123. Attackers can log in through POST /api/auth/login, solving only the image captcha, to obtain full control of site content, users and configuration.

 https://vulnerability.circl.lu/vuln/ghsa-6phq-6cxr-q574 GHSA-6phq-6cxr-q574 2026-10-20T08:19:57.910757+00:00

FlyCms through commit edfdf724 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain super administrator access via the flycms account with password admin123. Attackers can log in through POST /api/auth/login, solving only the image captcha, to obtain full control of site content, users and configuration.