Vulnerabilities

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.7, authenticated IDOR on admin/auth-token endpoint allows any administrator to read and overwrite another administrator's API tokens. This issue has been patched in version 1.0.8.7.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Givanz

Product

Vvveb

CVSS v3.1

9.0 AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L

Fix

available

Weakness

CWE-285

NVD status

Deferred

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-112905 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 48
   CVE NVD 42h ago

   Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.

   PoC public CVSS 9.8 Fix available CVE-2026-110799 Givanz