CVE-2026-82602

A security vulnerability has been detected in SeaCMS up to 13.6. This vulnerability affects unknown code of the file /ass.php. The manipulation leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

  • Published Aug 31, 2026
  • CVSS 5.5 medium
  • 0.5% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-82602 at the National Vulnerability Database