Time-of-Check Time-of-Use Vulnerability in Azuriom CMS Money Transfer Function
CVE-2026-19975

2.3LOW

Key Information:

Vendor: Azuriom
Status: Cms
Vendor: CVE Published:; 17 August 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-19975?

A vulnerability has been discovered in Azuriom CMS versions up to 1.2.12, affecting the money transfer functionality in the ProfileController. This weakness allows a remote attacker to manipulate the time-of-check time-of-use condition, potentially leading to unauthorized financial operations. The complexity of exploitation is high, requiring specific conditions to be met. Users are encouraged to upgrade to version 1.2.13, which includes a patch to mitigate this vulnerability. For further security, following best practices in application management and regularly updating systems is recommended.

Affected Version(s)

CMS 1.2.0

CMS 1.2.1

CMS 1.2.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-19975
Created by HORKimhab