Vulnerabilities

TI-2026-27337 CVE-2026-35183

Brave CMS has an Insecure Direct Object Reference in Article Image Deletion

MEDIUM 64

Brave CMS is an open-source CMS.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00209 Published 2026-04-06 Fixed in 2.0.6 CWE-639

TI-2026-27336 CVE-2026-35182

HIGH 73

Brave CMS is an open-source CMS.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00349 Published 2026-04-06 Fixed in 2.0.6 CWE-862

TI-2026-27318 CVE-2026-35164

HIGH 73

Brave CMS is an open-source CMS.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0072 Published 2026-04-06 Fixed in 2.0.6 CWE-434

TI-2026-27250 CVE-2026-35047

MEDIUM 49

Brave CMS is an open-source CMS.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00564 Published 2026-04-06 Fixed in 2.0.6 CWE-434