CVE-2026-126377

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 14, 2026

Last Seen

November 14, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Authentication Bypass in Vvveb CMS Exposed to Attack76.5

A vulnerability, CVE-2026-126377, was disclosed for Vvveb versions before 1.0.9.0, allowing unauthenticated attackers to exploit an authentication bypass in the generateCookie() function. This vulnerability enables attackers to brute-force cookie values, potentially leading to account takeover with...