CVE-2026-13546: Feehi CMS REST API Endpoint articles missing authentication
A vulnerability was found in Feehi CMS up to 2.1.1. This vulnerability affects unknown code of the file /api/articles of the component REST API Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-13546?
The severity of CVE-2026-13546 is rated as medium with a score of 5.5.
How do I fix CVE-2026-13546?
To fix CVE-2026-13546, ensure that authentication is properly implemented for the REST API Endpoint at /api/articles in Feehi CMS.
What type of vulnerability is CVE-2026-13546?
CVE-2026-13546 is a missing authentication vulnerability in the Feehi CMS REST API Endpoint.
Can CVE-2026-13546 be exploited remotely?
Yes, the exploitation of CVE-2026-13546 can be carried out remotely.
Which software is affected by CVE-2026-13546?
CVE-2026-13546 affects Feehi CMS versions up to 2.1.1.