CVE-2026-82602: SeaCMS ass.php authorization

Q: Which SeaCMS versions are in scope?

The vulnerability affects SeaCMS versions up to and including 13.6. No fixed version is identified in the provided information.

Q: Does exploitation require an authenticated account or user interaction?

No. The listed vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

Q: Is this likely to be actively exploitable?

A public exploit has been disclosed and may be used. Systems with remotely reachable SeaCMS installations should be treated as exposed until they can be assessed or remediated.

Published Aug 31, 2026

Updated

A security vulnerability has been detected in SeaCMS up to 13.6. This vulnerability affects unknown code of the file /ass.php. The manipulation leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

Affected Software

1 affected component

SEACMS SEACMS<=13.6

Event History

Aug 31, 2026

CVE Published

via MITRE·01:30 AM

Data Sourced

via MITRE·01:30 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which SeaCMS versions are in scope?

The vulnerability affects SeaCMS versions up to and including 13.6. No fixed version is identified in the provided information.

Does exploitation require an authenticated account or user interaction?

No. The listed vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

Is this likely to be actively exploitable?

A public exploit has been disclosed and may be used. Systems with remotely reachable SeaCMS installations should be treated as exposed until they can be assessed or remediated.

CVE-2026-82602: SeaCMS ass.php authorization

Affected Software

Event History

Frequently Asked Questions

Which SeaCMS versions are in scope?

Does exploitation require an authenticated account or user interaction?

Is this likely to be actively exploitable?

Company

Resources

Contact

Frequently Asked Questions

Which SeaCMS versions are in scope?

Does exploitation require an authenticated account or user interaction?

Is this likely to be actively exploitable?