CVE-2026-127058 | WonderCMS up to 3.6.x saveAction improper authorization

November 12, 2026 Yanac

A vulnerability marked as critical has been reported in WonderCMS up to 3.6.x. This impacts the function saveAction. Performing a manipulation results in improper authorization.

This vulnerability is known as CVE-2026-127058. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More