CVE-2026-67207
HIGHWolf CMS <= 0.8.3.1 - Authenticated Backup Authorization Bypass
Title source: manualDescription
Wolf CMS through 0.8.3.1 contains an authorization bypass vulnerability in BackupRestoreController that allows authenticated non-administrative users to access restricted backup functionality due to a PHP operator precedence flaw in the permission check expression. Attackers can exploit the incorrect evaluation of the access control expression to create, download, and restore backups without administrative privileges.
References (2)
Core 2
Core References
Exploit technical-description
exploit
Researcher Disclosure
https://github.com/Caycon/cve-advisories/blob/main/2026/WolfCms/CVE-2026-67207.md
Third Party Advisory third-party-advisory
https://www.vulncheck.com/advisories/wolf-cms-authorization-bypass-via-backuprestorecontroller
Scores
CVSS v3
8.8
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-697
Status
published
Products (1)
wolfcms/wolfcms
< 0.8.3.1
Published
Jul 30, 2026
Tracked Since
Jul 31, 2026