CVE-2026-96772Proof of concept (PoC) published · CISASuited to automated attack · CISA
Intelliants Subrion CMS actions.json assign-owner information disclosure
CVSS score
6.9
EPSS probability
%0.3
Risk score
0.0
Published
22 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.8
CVE-2020-18326
Cross-site request forgery in Intelliants Subrion Cms
I
Patch status unknown Public Exploits:1EPSS %2
6.1
CVE-2020-18324
Cross-site scripting in Intelliants Subrion Cms
I
Patch status unknown Public Exploits:1EPSS %2
6.1
CVE-2020-18325
Cross-site scripting in Intelliants Subrion Cms
I
Patch status unknown Public Exploits:1EPSS %2
7.2
CVE-2026-71292
Subrion CMS Admin Grid SQL Injection via Unwhitelisted ORDER BY sort Parameter
I
Patch status unknownEPSS %1
6.5
CVE-2026-72604
Intelliants Subrion CMS - Path Traversal
I
Patch status unknownEPSS %1
5.3
CVE-2026-96773
Intelliants Subrion CMS Login Page login.php authorize redirect
I
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-96772"