CVE-2026-112205

Vendor

Fundacja Widzialni

Product

WidzialniCMS

CVSS v4.0

6.9 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-307

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 30
   Advisory CERT Polska 6h ago

   Vulnerabilities in WidzialniCMS software

   CERT Polska coordinated disclosure of 4 vulnerabilities (CVE-2026-110468, CVE-2026-110469, CVE-2026-112204 and CVE-2026-112205) found in WidzialniCMS software.

   CVE-2026-110468CVE-2026-110469CVE-2026-112204+1 more
2. 23
   CVE NVD 4h ago

   WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality.

   WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality. The cookie-based lockout can be bypassed by omitting the login_count and login_timeout cookies, allowing an unauthenticated attacker to…

   CVSS 6.9 Fix available CVE-2026-112205 Fundacja Widzialni