TI-2026-75441 CVE-2026-111655 · GHSA-wcpc-prgf-22hq
Authorization bypass in ThinkAdmin think-plugs-admin file records
Priority MEDIUM 56
ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit.