CVE-2026-112296 | sunkaifei FlyCms /api/auth/login default credentials

October 19, 2026 Yanac

A vulnerability categorized as critical has been discovered in sunkaifei FlyCms. This issue affects some unknown processing of the file /api/auth/login. Such manipulation leads to use of default credentials.

This vulnerability is referenced as CVE-2026-112296. It is possible to launch the attack remotely. No exploit is available.

Applying a patch is advised to resolve this issue.VulDB Recent EntriesRead More