Ssunkaifei

Products

Exploited and recent CVEs

• CVE-2026-112296 Critical 9.8 FlyCms through commit edfdf724 Default Super Administrator Credentials 0.4%
• CVE-2026-112295 Medium 5.4 FlyCms through commit edfdf724 Mass Assignment via /ucenter/account_update 0.3%
• CVE-2026-112294 Medium 4.3 FlyCms through commit edfdf724 Missing Authorization via Action Counter Endpoint 0.2%
• CVE-2025-15094 Medium 4.3 sunkaifei FlyCMS User Login UserController.java userLogin cross site scripting 0.4%
• CVE-2025-15093 Medium 4.3 sunkaifei FlyCMS Admin Login IndexAdminController.java cross site scripting 0.4%