ThinkCMF vulnerabilities
CVEs whose affected-version data names the ThinkCMF package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-111352High· 8.8PoCThinkCMF through 8.0.1 Incorrect Authorization in Admin REST API
ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every admin REST API endpoint because Auth::check() fails open when no admin_api ru…
▾ MidnightThinkCMF · ThinkCMFEPSS 0.46%via CVEORG
CVE-2026-102771Medium· 4.7A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7
A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. Affected by this issue is the function MailController::templatePut of the file cmf-api/src/admin/controller/MailController.php of the component Email Template. T…
▾ SunlitNaichen · ThinkCMFEPSS 0.24%via NVD