CVE-2026-112025: light0011 cms Captcha Validation UserController.class.php access control
A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This impacts an unknown function of the file App/Home/Controller/UserController.class.php of the component Captcha Validation. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
The attack can be launched remotely, and the vector does not require privileges or user interaction according to the supplied severity vector. Public exploit availability increases the likelihood of attempted exploitation.
Which deployments are known to be affected?
The affected component is Captcha Validation in App/Home/Controller/UserController.class.php. The provided information identifies the affected light0011 cms revisions as c774dce31c6df0055568a8d5c53d964d99be199d and f72cf46f601efb2a0618c3814cc2f61380b38930.
Is a vendor fix available?
No vendor response is reported. The project was notified through an issue report but had not responded at the time of publication.