CVE-2026-86306 | light0011 cms Cookie Helper UserModel.class.php Username improper authentication

A vulnerability, which was classified as critical, was found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects an unknown part of the file App/Home/Model/UserModel.class.php of the component Cookie Helper. Executing a manipulation of the argument Username can lead to improper authentication.

This vulnerability appears as CVE-2026-86306. The attack may be performed from remote. In addition, an exploit is available.

This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More