CVE-2021-40616

thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the background user management group permissions. The use condition is that the background user management group authority is required.

• CWE-425

• https://github.com/thinkcmf/thinkcmf/issues/722Exploit, Third Party Advisory
• https://github.com/thinkcmf/thinkcmf/issues/722Exploit, Third Party Advisory

Published

Jun 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40607The schm_box_size function in GPAC 1.0.1 allows attackers to…5.5
• CVE-2021-40608The gf_hinter_track_finalize function in GPAC 1.0.1 allows a…5.5
• CVE-2021-40609The GetHintFormat function in GPAC 1.0.1 allows attackers to…5.5
• CVE-2021-4061Type confusion in V8 in Google Chrome prior to 96.0.4664.93 …8.8
• CVE-2021-40610Emlog Pro v 1.0.4 cross-site scripting (XSS) in Emlog Pro ba…5.4
• CVE-2021-40612An issue was discovered in Opmantek Open-AudIT after 3.5.0. …9.8
• CVE-2021-40617An SQL Injection vulnerability exists in openSIS Community E…9.8
• CVE-2021-40618An SQL Injection vulnerability exists in openSIS Classic 8.0…9.8
• CVE-2021-4062Heap buffer overflow in BFCache in Google Chrome prior to 96…8.8
• CVE-2021-4063Use after free in developer tools in Google Chrome prior to …8.8
• CVE-2021-40633A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c i…8.8
• CVE-2021-40635OS4ED openSIS 8.0 is affected by SQL injection in ChooseCpSe…7.5