CVE-2026-108815

A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/member_deal.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

• CWE-79
• CWE-94

• https://github.com/ants01/idccmsV1.70_An-XSS_vulnerability_exists
• https://vuldb.com/cve/CVE-2026-108815
• https://vuldb.com/submit/964056
• https://vuldb.com/vuln/416592
• https://vuldb.com/vuln/416592/cti

Published

Oct 12, 2026

Last Modified

Oct 12, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-10881Out of bounds read and write in ANGLE in Google Chrome prior…9.6
• CVE-2026-108810A security flaw has been discovered in tsi-coop tsi-dpdp-cms…5.3
• CVE-2026-108811A weakness has been identified in WMCMS 4.446.1257. The affe…4.3
• CVE-2026-108812A security vulnerability has been detected in SEMCMS up to 5…6.5
• CVE-2026-108813A vulnerability was detected in SEMCMS up to 5.0. This affec…6.3
• CVE-2026-108814A flaw has been found in SEMCMS up to 5.0. This impacts an u…6.3
• CVE-2026-108816A vulnerability was found in agno-agi agno up to 3.0.6. Affe…6.3
• CVE-2026-108817A vulnerability was determined in agno-agi agno up to 3.0.9.…5.5
• CVE-2026-108818A vulnerability was identified in agno-agi agno up to 2.7.3/…7.3
• CVE-2026-10882Use after free in Network in Google Chrome prior to 149.0.78…8.8
• CVE-2026-10883Type Confusion in ANGLE in Google Chrome prior to 149.0.7827…8.8
• CVE-2026-108839thClaws through 0.141.0 contains a link-following vulnerabil…4.2