CVE-2026-5248

A vulnerability has been found in gougucms 4.08.18. This affects the function reg_submit of the file gougucms-master\app\home\controller\Login.php of the component User Registration Handler. Such manipulation of the argument level leads to dynamically-determined object attributes. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-913
• CWE-915

• https://thinhneee.github.io/posts/gougu-mass-assign/
• https://vuldb.com/submit/780589
• https://vuldb.com/vuln/354429
• https://vuldb.com/vuln/354429/cti

Published

Apr 1, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-52470SQL injection vulnerability in Crocus v.1.3.44 allows a remo…9.8
• CVE-2026-52472SQL injection vulnerability in Wgcloud 3.6.4 allows a remote…9.8
• CVE-2026-52473An issue in Wgcloud 3.6.4 allows a remote attacker to escala…4.3
• CVE-2026-52474An issue in aiflowy <= 2.1.2 allows a remote attacker to obt…7.5
• CVE-2026-52475Cross Site Scripting vulnerability in aiflowy <= 2.1.2 allow…6.1
• CVE-2026-52476SQL Injection vulnerability in aiflowy <= 2.1.2 allows a rem…7.5
• CVE-2026-52480An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 al…6.5
• CVE-2026-52481An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 al…7.5
• CVE-2026-52482An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 al…7.5
• CVE-2026-52483The ping diagnostics and other similar functions of the Mitr…8.8
• CVE-2026-52484An issue in MitraStar GPT-2742GX4X5v6-SV GL_g2.5_100XNT0b23_…8.8
• CVE-2026-52486An issue in OpenDDS 3.33.x allows a local attacker to cause …6.6