CVE-2026-120448highCWE-915

CVE-2026-120448: high-severity vulnerability in doramart DoraCMS

DoraCMS through 3.1.0 Mass Assignment via API Key Update Endpoint

Published

Follow this CVE+ Monitor DoraCMS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

41Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 8.6epss 0.4%
DoraCMS through 3.1.0 contains a mass assignment vulnerability in the PUT /api/v1/user/api-keys/:id endpoint that allows authenticated low-privileged users to rebind their API key to another user's account. Attackers can set the userId field on their own key to a victim's id, then act as that victim to modify profiles and publish or delete content.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Affected products
doramart · DoraCMS
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — doramart DoraCMS

In the same product, most dangerous first.

CVE-2026-3795MEDIUMdoramart DoraCMS v1.js createFileBypath path traversalEPSS 0.7%CVE-2026-3794MEDIUMdoramart DoraCMS Email API send improper authenticationEPSS 0.7%CVE-2026-25870MEDIUMDoraCMS <= 3.1 UEditor Remote Image Fetch SSRFEPSS 0.3%