aj2108/CVE-2026-8239

PoC

CVE-2026-8239 is an Insecure Direct Object Reference (IDOR) vulnerability affecting Concrete CMS 9.5.0 and earlier.

view exploit source poc_in_githubauthor aj2108published 2026-08-01catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-8239US	medium5.3OT elevated	0.19% (9th)	Exploit	2026-05-21
Concrete CMS 9.5.0 and below is vulnerable to IDOR. The '/ccm/frontend/conversations/get_rating' endpoint confirms existence and returns rating score for any message by ID. The Con…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.