Read the docs
TI-2026-83564 Aliases CVE-2026-120185GHSA-r68q-24fh-c39p

Improper privilege management in ken678 YznCMS auth group handler

Priority LOW 23CWE-266Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Privilege escalation
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-266.

Summary

ken678 YznCMS up to 2.2.0 mishandles privileges in the Backend function of app/admin/controller/auth/Group.php, which is the auth group handler. The flaw is improper privilege management (CWE-266), and a remote attacker with high privileges can affect the system with low confidentiality, integrity and availability impact.

Written with Claude Haiku 5.5 from the sources below · 2026-11-02

Description from the CNA

A security flaw has been discovered in ken678 YznCMS up to 2.2.0. The affected element is the function Backend of the file app/admin/controller/auth/Group.php of the component Auth Group Handler. Performing a manipulation results in improper privilege management. The attack can be initiated remotely. Upgrading to version 2.2.1 is sufficient to fix this issue. The patch is named ed16cd7f7f73e0316ffa8a148d. You should upgrade the affected component.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00227 13th percentileScored 2026-11-07
Fix Fixed YznCMS (ken678): 2.2.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ken678YznCMS2.0; 2.1; 2.2.02.2.1Patch availableCNA
  • YznCMS Vendorken678 Affected 2.0; 2.1; 2.2.0 Fixed in 2.2.1 Patch available CNA

CPE names CNA · 1

CPEVersionsRoleVendor
cpe:2.3:a:yzncms:yzncms:*:*:*:*:*:*:*:*——Yzncms
  • cpe:2.3:a:yzncms:yzncms:*:*:*:*:*:*:*:* Versions — — ·Yzncms

Remediation

Upgrade ken678 YznCMS to version 2.2.1, which fixes the issue, using the patch ed16cd7f7f73e0316ffa8a148d.

Written with Claude Haiku 5.5 from the sources below · 2026-11-02

  • Fix · CNA YznCMS (ken678) Fixed in 2.2.1

Timeline

  1. 2026-10-31 Threatist record created from CVE-2026-120185
  2. 2026-11-01 Alias added: GHSA-r68q-24fh-c39p
  3. 2026-11-02 CISA SSVC decision points changed

References

Patch 2

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences