Authentication Bypass in OpenRapid RapidCMS Affects Multiple Versions
CVE-2026-38930
Currently unrated
What is CVE-2026-38930?
OpenRapid RapidCMS v1.3.1 has been found to include a security flaw that allows unauthorized access through an authentication bypass. This vulnerability is exploited by injecting a specially crafted SQL payload into the name cookie parameter, which could enable attackers to gain unauthorized access to protected areas of the application. Users of affected versions are strongly advised to apply the necessary patches or updates to mitigate potential risks.