CVE-2026-88897

8.2 highEPSS 0.6%

High (8.2). EPSS 0.6% chance of exploitation in the next 30 days.

Flextype CMS through 1.0.0-alpha.3 accepts API authentication credentials through URL query string parameters in REST API routes. Attackers with access to web server, proxy, or monitoring logs can recover valid API token pairs that grant full API access.

Severity

CVSS 4.0

8.2 high

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

5.9 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-598
Published: 2026-09-10
Modified: 2026-09-15
Record from: the NVD, synced 2026-10-19

References

https://github.com/flextype/flextype
https://github.com/flextype/flextype/blob/v1.0.0-alpha.3/src/flextype/core/Endpoints/Api.php
https://github.com/flextype/flextype/issues/598
https://www.vulncheck.com/advisories/flextype-cms-through-1.0.0-alpha.3-api-token-exposure-via-query-string

Check your stack JSON