CVE-2026-86709 in Pressengine Plugin

요약

\~에 의해 MITRE • 2026. 09. 17.

The Pressengine WordPress plugin through 1.0 does not stop its login handler from issuing a session when authentication fails, allowing unauthenticated attackers to log in as any user, including administrators.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• 책임이 있는: WPScan
• 예약하다: 2026. 09. 08.
• 공개: 2026. 09. 17.
• 모더레이션: 수락
• 항목: VDB-406318
• CPE: 준비됨
• CWE: CWE-287 (확인됨)
• CVSS: 7.3 (VulDB)
• EPSS: 0.00000
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Hostingprovider

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-86709
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-86709
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-86709/