CVE-2026-120185 | ken678 YznCMS up to 2.2.0 Auth Group Group.php Backend privileges management (ed16cd7f7f73e0316ffa8a148d)

October 31, 2026 Yanac

A vulnerability identified as problematic has been detected in ken678 YznCMS up to 2.2.0. The affected element is the function Backend of the file app/admin/controller/auth/Group.php of the component Auth Group Handler. Performing a manipulation results in improper privilege management.

This vulnerability is identified as CVE-2026-120185. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More