Doracms

Latest news about Doracms: context, sources and what to do.

1 article

Cybersecurity

Discover CVE-2026-120448, a CVSS 8.1 mass assignment vulnerability in DoraCMS up to 3.1.0 allowing low-privileged API key hijacking.

CVSS 8.1 HIGHCVE-2026-120448See vendor advisoryNo patch · mitigation

2 days ago1 min read