CVE-2026-108703 | 1Panel-dev CordysCRM up to 1.9.3 poc_approval_resource_push.py resourceId improper authorization

October 11, 2026 Yanac

A vulnerability described as critical has been identified in 1Panel-dev CordysCRM up to 1.9.3. Affected is an unknown function of the file poc_approval_resource_push.py. Executing a manipulation of the argument resourceId can lead to improper authorization.

This vulnerability is registered as CVE-2026-108703. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More