Read the docs
TI-2026-76496 Aliases CVE-2026-112296GHSA-6phq-6cxr-q574

Default super administrator credentials in FlyCms

Priority MEDIUM 48CWE-1392Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

FlyCms through commit edfdf724 ships with a built-in account that uses a default password. An unauthenticated remote attacker can log in with these default credentials and gain super administrator access, which gives full control of site content, users and configuration. The flaw is tracked as CWE-1392.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Description from the CNA

FlyCms through commit edfdf724 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain super administrator access via the flycms account with password admin123. Attackers can log in through POST /api/auth/login, solving only the image captcha, to obtain full control of site content, users and configuration.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00418 36th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

No affected products listed by the sources yet.

Remediation

The sources list no fixed version for FlyCms.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Timeline

  1. 2026-10-19 Threatist record created from CVE-2026-112296
  2. 2026-10-19 Alias added: GHSA-6phq-6cxr-q574

References

Other 3

  • TI-2024-15191 Cross Site Request Forgery vulnerability in FlyCms v.1.0 allows a remote attacker to… CVSS 3.1HIGH 8.8
  • TI-2025-13772 sunkaifei FlyCMS User Login UserController.java userLogin cross site scripting CVSS 4.0MEDIUM 5.3
  • TI-2025-13771 sunkaifei FlyCMS Admin Login IndexAdminController.java cross site scripting CVSS 4.0MEDIUM 5.3
  • TI-2026-76495 Mass assignment in FlyCms lets users overwrite protected account data CVSS 4.0MEDIUM 5.3
  • TI-2026-76494 FlyCms counter endpoint missing authorization lets users edit others' content CVSS 4.0MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences