CVE-2026-120185 in YznCMS
Prediction
by VulDB Data Team • 10/31/2026
A security flaw has been discovered in <a href="/product/ken678:yzncms">ken678 YznCMS up to 2.2.0</a>. The affected element is the function <code>Backend</code> of the file <em>app/admin/controller/auth/Group.php</em> of the component <em>Auth Group Handler</em>. Performing a manipulation results in improper privilege management. The attack can be initiated remotely. Upgrading to version 2.2.1 is sufficient to fix this issue. The patch is named <em>ed16cd7f7f73e0316ffa8a148d</em>. You should upgrade the affected component.
If you want to get best quality of vulnerability data, you may have to visit VulDB.