{"metadata": {"vulnerability": "CVE-2026-111352", "count": 13, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111352", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-15T20:55:42.432Z", "date_only": false, "value": "2026-10-15T20:55:42.432Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111352", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T21:43:42.341Z", "date_only": false, "value": "2026-10-15T21:43:42.341Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111352", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T21:43:42.341Z", "date_only": false, "value": "2026-10-15T21:43:42.341Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111352", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T21:43:42.341Z", "date_only": false, "value": "2026-10-15T21:43:42.341Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111352", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T22:12:17.812Z", "date_only": false, "value": "2026-10-15T22:12:17.812715Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117447218780078094", "record": "CVE-2026-111352", "field": "creation_timestamp", "uuid": "43327615-c960-4049-bbcd-d5ad081a1680", "content": "CVE-2026-111352 ThinkCMF through 8.0.1 Incorrect Authorization in Admin REST API ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every admin REST API endpoint because Auth::check() fails open when no admin_api rule exists. Attackers with a valid admin-type API token can list member emails and mobile numbers, disable members, and call PUT admin/roles/{id}/authorize to grant themselves full administrator rights.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111352https://hackmd.io/@hieuPenguinnn/thinkcmf-admin-rest-api-missing-authorizationhttps://github.com/thinkcmf/cmf-core/blob/v8.0.3/src/lib/Auth.php#L40-L61https://github.com/thinkcmf/cmf-core/blob/v8.0.3/src/controller/RestAdminBaseController.php#L15-L34https://github.com/thinkcmf/cmf-api/blob/v8.0.7/src/admin/controller/RoleController.php#L345-L381https://www.vulncheck.com/advisories/thinkcmf-through-8.0.1-incorrect-authorization-in-admin-rest-api#ThinkCMF#CVE_2026_111352#bot", "url": "https://infosec.exchange/users/cve/statuses/117447218780078094"}, {"timestamp": "2026-10-15T22:19:33Z", "date_only": false, "value": "2026-10-15T22:19:33Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QF7C-PG8V-Q3RX", "record": "GHSA-QF7C-PG8V-Q3RX", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-15T22:19:33.043Z", "date_only": false, "value": "2026-10-15T22:19:33.043", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111352", "record": "FKIE_CVE-2026-111352", "field": "published"}, {"timestamp": "2026-10-15T23:16:13.506Z", "date_only": false, "value": "2026-10-15T23:16:13.506321Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxx6xvx3xv23", "record": "CVE-2026-111352", "field": "creation_timestamp", "uuid": "67f57a2e-2c14-4882-b53b-c3b5e11857d6", "content": "\ud83d\udfe0 CVE-2026-111352 - High (8.8)\n\nThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseControll...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-111352/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxx6xvx3xv23"}, {"timestamp": "2026-10-16T00:31:57Z", "date_only": false, "value": "2026-10-16T00:31:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QF7C-PG8V-Q3RX", "record": "GHSA-QF7C-PG8V-Q3RX", "field": "published"}, {"timestamp": "2026-10-16T00:31:57Z", "date_only": false, "value": "2026-10-16T00:31:57Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QF7C-PG8V-Q3RX", "record": "GHSA-QF7C-PG8V-Q3RX", "field": "modified"}, {"timestamp": "2026-10-16T11:10:04.421Z", "date_only": false, "value": "2026-10-16T11:10:04.421069Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxygufttst2h", "record": "CVE-2026-111352", "field": "creation_timestamp", "uuid": "a51eb43e-f4b4-40d1-a1f1-ca84b5de2826", "content": "CVE-2026-111352 - thinkcmf\nThe ThinkCMF platform (versions up to 8.0.1) does not correctly verify who can use its admin REST interface. An attacker who already has a valid admin\u2011type token can access any admin\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#thinkcmf #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxygufttst2h"}, {"timestamp": "2026-10-16T18:25:45.343Z", "date_only": false, "value": "2026-10-16T18:25:45.343", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111352", "record": "FKIE_CVE-2026-111352", "field": "lastModified"}]}