{"id":"CVE-2026-86271","title":"A vulnerability was found in FluentCMS up to 0.0.5","summary":"A vulnerability was found in FluentCMS up to 0.0.5. This affects the function GetAccessible of the file src/Backend/FluentCMS.Services/Permissions/PermissionManager.cs. Performing a manipulation results in missing authorization. It is po…","severity":"medium","cvss":4.7,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-862","CWE-863"],"product":"FluentCMS","affected":["FluentCMS 0.0.1","FluentCMS 0.0.2","FluentCMS 0.0.3","FluentCMS 0.0.4","FluentCMS 0.0.5"],"published":"2026-09-07","updated":"2026-09-09","sourceUpdated":"2026-09-09T15:17:15.700","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86271","references":[{"url":"https://github.com/fluentcms/FluentCMS/","label":"cna@vuldb.com"},{"url":"https://github.com/fluentcms/FluentCMS/issues/2409","label":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-86271","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/904824","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399430","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399430/cti","label":"cna@vuldb.com"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T14:14:35.198073Z"},"epss":0.00232,"epssPercentile":0.14279,"ingestedAt":"2026-09-08T15:33:26.975Z","slug":"CVE-2026-86271","body":"## Overview\n\nA vulnerability was found in FluentCMS up to 0.0.5. This affects the function GetAccessible of the file src/Backend/FluentCMS.Services/Permissions/PermissionManager.cs. Performing a manipulation results in missing authorization. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":38,"depthScoreParts":{"impact":25.9,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[{"seq":202108,"id":"CVE-2026-86271","ts":1789400062785,"field":"exploit_available","old":"false","new":"true"},{"seq":200835,"id":"CVE-2026-86271","ts":1789397616758,"field":"exploit_available","old":"true","new":"false"},{"seq":199528,"id":"CVE-2026-86271","ts":1789395529311,"field":"exploit_available","old":"false","new":"true"},{"seq":198773,"id":"CVE-2026-86271","ts":1789392244520,"field":"exploit_available","old":"true","new":"false"},{"seq":197106,"id":"CVE-2026-86271","ts":1789384292745,"field":"exploit_available","old":"false","new":"true"},{"seq":194235,"id":"CVE-2026-86271","ts":1789378783412,"field":"exploit_available","old":"true","new":"false"},{"seq":193022,"id":"CVE-2026-86271","ts":1789376515452,"field":"exploit_available","old":"false","new":"true"},{"seq":191809,"id":"CVE-2026-86271","ts":1789373631444,"field":"exploit_available","old":"true","new":"false"},{"seq":190594,"id":"CVE-2026-86271","ts":1789369476202,"field":"exploit_available","old":"false","new":"true"},{"seq":189381,"id":"CVE-2026-86271","ts":1789368421305,"field":"exploit_available","old":"true","new":"false"},{"seq":188164,"id":"CVE-2026-86271","ts":1789365231138,"field":"exploit_available","old":"false","new":"true"},{"seq":186951,"id":"CVE-2026-86271","ts":1789363471614,"field":"exploit_available","old":"true","new":"false"},{"seq":185737,"id":"CVE-2026-86271","ts":1789361229497,"field":"exploit_available","old":"false","new":"true"},{"seq":184524,"id":"CVE-2026-86271","ts":1789358364128,"field":"exploit_available","old":"true","new":"false"},{"seq":182775,"id":"CVE-2026-86271","ts":1789354317563,"field":"exploit_available","old":"false","new":"true"},{"seq":181568,"id":"CVE-2026-86271","ts":1789353318062,"field":"exploit_available","old":"true","new":"false"},{"seq":180361,"id":"CVE-2026-86271","ts":1789350285102,"field":"exploit_available","old":"false","new":"true"},{"seq":179154,"id":"CVE-2026-86271","ts":1789348293281,"field":"exploit_available","old":"true","new":"false"},{"seq":177947,"id":"CVE-2026-86271","ts":1789346370386,"field":"exploit_available","old":"false","new":"true"},{"seq":176740,"id":"CVE-2026-86271","ts":1789343184859,"field":"exploit_available","old":"true","new":"false"},{"seq":174857,"id":"CVE-2026-86271","ts":1789334876062,"field":"exploit_available","old":"false","new":"true"},{"seq":173652,"id":"CVE-2026-86271","ts":1789333696105,"field":"exploit_available","old":"true","new":"false"},{"seq":172466,"id":"CVE-2026-86271","ts":1789331093429,"field":"exploit_available","old":"false","new":"true"},{"seq":171280,"id":"CVE-2026-86271","ts":1789328781227,"field":"exploit_available","old":"true","new":"false"},{"seq":170075,"id":"CVE-2026-86271","ts":1789327197533,"field":"exploit_available","old":"false","new":"true"},{"seq":168870,"id":"CVE-2026-86271","ts":1789323840472,"field":"exploit_available","old":"true","new":"false"},{"seq":167665,"id":"CVE-2026-86271","ts":1789319703005,"field":"exploit_available","old":"false","new":"true"},{"seq":166460,"id":"CVE-2026-86271","ts":1789318776489,"field":"exploit_available","old":"true","new":"false"},{"seq":165255,"id":"CVE-2026-86271","ts":1789315791071,"field":"exploit_available","old":"false","new":"true"},{"seq":164050,"id":"CVE-2026-86271","ts":1789313634613,"field":"exploit_available","old":"true","new":"false"},{"seq":162845,"id":"CVE-2026-86271","ts":1789311903832,"field":"exploit_available","old":"false","new":"true"},{"seq":161640,"id":"CVE-2026-86271","ts":1789308733544,"field":"exploit_available","old":"true","new":"false"},{"seq":159753,"id":"CVE-2026-86271","ts":1789300470912,"field":"exploit_available","old":"false","new":"true"},{"seq":156742,"id":"CVE-2026-86271","ts":1789294756043,"field":"exploit_available","old":"true","new":"false"},{"seq":155537,"id":"CVE-2026-86271","ts":1789292968308,"field":"exploit_available","old":"false","new":"true"},{"seq":154332,"id":"CVE-2026-86271","ts":1789289797932,"field":"exploit_available","old":"true","new":"false"},{"seq":151583,"id":"CVE-2026-86271","ts":1789277630219,"field":"exploit_available","old":"false","new":"true"},{"seq":150544,"id":"CVE-2026-86271","ts":1789276246200,"field":"exploit_available","old":"true","new":"false"},{"seq":149511,"id":"CVE-2026-86271","ts":1789273825080,"field":"exploit_available","old":"false","new":"true"},{"seq":148478,"id":"CVE-2026-86271","ts":1789271349084,"field":"exploit_available","old":"true","new":"false"},{"seq":146509,"id":"CVE-2026-86271","ts":1789269398401,"field":"exploit_available","old":"false","new":"true"},{"seq":145314,"id":"CVE-2026-86271","ts":1789266340600,"field":"exploit_available","old":"true","new":"false"},{"seq":144218,"id":"CVE-2026-86271","ts":1789262617100,"field":"exploit_available","old":"false","new":"true"},{"seq":143122,"id":"CVE-2026-86271","ts":1789261533785,"field":"exploit_available","old":"true","new":"false"},{"seq":141953,"id":"CVE-2026-86271","ts":1789258832207,"field":"exploit_available","old":"false","new":"true"},{"seq":140794,"id":"CVE-2026-86271","ts":1789256727483,"field":"exploit_available","old":"true","new":"false"},{"seq":139596,"id":"CVE-2026-86271","ts":1789254832429,"field":"exploit_available","old":"false","new":"true"},{"seq":138398,"id":"CVE-2026-86271","ts":1789251934560,"field":"exploit_available","old":"true","new":"false"},{"seq":137200,"id":"CVE-2026-86271","ts":1789247833148,"field":"exploit_available","old":"false","new":"true"},{"seq":136002,"id":"CVE-2026-86271","ts":1789247056401,"field":"exploit_available","old":"true","new":"false"}]}