Authentication Bypass in Vvveb CMS Affects Website Builders
CVE-2026-110799

9.8CRITICAL

Key Information:

Vendor

Givanz

Status
Vvveb
Vendor
CVE Published:
30 October 2026

What is CVE-2026-110799?

Vvveb CMS, a user-friendly content management system with a built-in page builder, had a vulnerability prior to version 1.0.8.7 that exposed its password reset functionality to an authentication bypass risk. This occurred due to inadequate validation of user and token GET parameters, allowing unauthorized access. The issue has been addressed and patched in version 1.0.8.7, enhancing the security of user accounts.

Affected Version(s)

Vvveb < 1.0.8.7

References

https://github.com/givanz/Vvveb/security/advisories/GHSA-...
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.