What is CVE-2026-65054?

CVE-2026-65054 is a low-severity vulnerability in Mediacms, classified under Incorrect Authorization. CVSS score: 3.1/10. Published 2026-07-21.

How severe is CVE-2026-65054?

Low severity. CVSS v3 base score is 3.1 out of 10.

Auth bypass in Mediacms

CVE-2026-65054

MediaCMS 8.2.0 contains an information disclosure vulnerability that allows authenticated users to expose private media metadata belonging to other users by adding arbitrary media tokens to their own playlist without access control checks…

Vulnerability class: Broken Access Control

CVSS v3 metric

CVSS v3 base score 3.1 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Mediacms — versions 8.2.0

Weakness classification (CWE)

CWE-863 — Incorrect Authorization

References

disclosure@vulncheck.com (product)
disclosure@vulncheck.com (patch)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-65054?: CVE-2026-65054 is a low-severity vulnerability in Mediacms, classified under Incorrect Authorization. CVSS score: 3.1/10. Published 2026-07-21.
How severe is CVE-2026-65054?: Low severity. CVSS v3 base score is 3.1 out of 10.