Cybersecurity
DoraCMS CVE-2026-120448: Critical Mass Assignment Flaw in API Keys
Discover CVE-2026-120448, a CVSS 8.1 mass assignment vulnerability in DoraCMS up to 3.1.0 allowing low-privileged API key hijacking.
CVSS 8.1 HIGHCVE-2026-120448See vendor advisoryNo patch · mitigation
1 min read