Missing Authentication Vulnerability in baserCMS
CVE-2026-93462

6.9MEDIUM

Key Information:

Vendor

Basercms User Community

Status
Basercms
Vendor
CVE Published:
30 September 2026

What is CVE-2026-93462?

A vulnerability exists in baserCMS due to missing authentication for a critical function. This flaw allows an unauthenticated remote attacker to potentially gain access to sensitive information, increasing the risk of data exposure for affected installations. It is crucial for organizations using baserCMS to apply necessary patches and implement proper authentication measures to mitigate this threat.

Affected Version(s)

baserCMS 0 < 5.4.1

baserCMS 0 < 5.3.1

References

https://jvn.jp/en/jp/JVN14353754
https://basercms.net/security/JVN_14353754

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.