PT-2026-1212 · Minicms · Minicms

Blackooo · Published 2026-01-05 · Updated 2026-01-10 · CVE-2025-15458

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions bg5sbk MiniCMS versions up to 1.8

Description A flaw exists in bg5sbk MiniCMS that can lead to improper authentication. The issue affects an unknown function within the Article Handler component, specifically in the file /mc-admin/post-edit.php. It is possible to exploit this issue remotely by executing a manipulation. The exploit has been publicly disclosed. The vendor was informed of this disclosure but did not respond.

Recommendations Versions prior to 1.8 should be updated. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-15458

Affected Products

Minicms

References · 12

• 🔥 https://github.com/ueh1013/VULN/issues/9 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-15458 · Security Note
• https://osv.dev/vulnerability/CVE-2025-15458 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2008049118132785470 · Twitter Post
• https://t.me/CVEtracker/41347 · Telegram Post
• https://vuldb.com/?submit.725142 · Note
• https://twitter.com/CVEnew/status/2008055070693249246 · Twitter Post
• https://vuldb.com/?ctiid.339491 · Note
• https://t.me/cveNotify/147674 · Telegram Post
• https://twitter.com/cracbot/status/2009218585332470126 · Twitter Post
• https://vuldb.com/?id.339491 · Note
• https://twitter.com/cracbot/status/2009943351152521433 · Twitter Post