CVE-2026-29597

Name of the Vulnerable Software and Affected Versions DDSN Interactive Acora CMS version 10.7.1

Description An incorrect access control issue exists in the file details.asp API endpoint of DDSN Interactive Acora CMS version 10.7.1. Attackers with editor privileges can access sensitive files by sending specially crafted requests to this endpoint. The vulnerable endpoint is /file details.asp. The issue allows unauthorized access to files.

Recommendations Apply appropriate access controls to the file details.asp endpoint to restrict access to sensitive files. Ensure that only authorized users with the necessary privileges can access these files.