Authorization Vulnerability in Azuriom CMS by Azuriom

CVE-2026-54415

What is CVE-2026-54415?

The Azuriom CMS is susceptible to a missing authorization vulnerability in its server management routes. This flaw affects versions prior to 1.2.11, allowing authenticated attackers with the appropriate permissions to exploit crafted HTTP requests. Through manipulation of server tokens and API endpoints, unauthorized users can change passwords and email addresses of non-admin accounts, potentially enabling full account takeover. It is crucial for users to update their systems to the latest version to mitigate this vulnerability.

References