Mmastodon TechnologyCybersecurity first seen 8 h ago, last 8 h ago, peak #5

LavaLite CMS vulnerability allows account tampering by low-privileged users

Original: 🚨 EUVD-2026-97358 📊 Score: 7.1/10 (CVSS v3.1) 📦 Product: CMS 🏢 Vendor: LavaLite 📅 Updated: 2026-10-12 📝 LavaLite CMS thr

A newly catalogued vulnerability, EUVD-2026-97358, affects LavaLite CMS through version 10.1.2 with a CVSS score of 7.1. The flaw is an authorization bypass that lets authenticated low-privileged users modify other users' accounts by abusing the software's permissions handling. Administrators running the content management system are being urged to review the advisory and update their installations.

Why now: Security teams monitor newly published vulnerability advisories with moderate-to-high severity scores to assess patching priorities.

LavaLiteEUVD-2026-97358

Open on mastodon →

Rank over time, top of the chart is #1. 2 snapshots from 8 h ago to 8 h ago.

Evidence

• 🚨 EUVD-2026-97358 📊 Score: 7.1/10 (CVSS v3.1) 📦 Product: CMS 🏢 Vendor: LavaLite 📅 Updated: 2026-10-12 📝 LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to modify other users' accounts by abusing the… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/1990695