Vulnerability · Published Jul 30, 2026 · Assigned by VulnCheck

CVE-2026-67207Wolf CMS 0.8.3.1 Authorization Bypass via BackupRestoreController

High 8.8

In plain English

A high-severity security flaw in wolfcms from wolfcms. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)0.5%top 54.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Wolf CMS through 0.8.3.1 contains an authorization bypass vulnerability in BackupRestoreController that allows authenticated non-administrative users to access restricted backup functionality due to a PHP operator precedence flaw in the permission check expression. Attackers can exploit the incorrect evaluation of the access control expression to create, download, and restore backups without administrative privileges.

Affected products (as reported)

Vendor	Product	Versions
wolfcms	wolfcms	0 – through 0.8.3.1

Weakness: CWE-697 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Researcher Disclosure technical-description, exploit
https://www.vulncheck.com/advisories/wolf-cms-authorization-bypass-via-backuprestorecontroller third-party-advisory