CVE-2026-88897
Flextype CMS through 1.0.0-alpha.3 API Token Exposure via Query String
- State
- Published
- Severity
- 8.2 High
- Published
- Sep 10, 2026
- Updated
- Sep 15, 2026
- Reserved
- Sep 10, 2026
Description
Flextype CMS through 1.0.0-alpha.3 accepts API authentication credentials through URL query string parameters in REST API routes. Attackers with access to web server, proxy, or monitoring logs can recover valid API token pairs that grant full API access.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.2 High | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 5.9 Medium | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N | VulnCheck |
Weaknesses
- CWE-598 Use of GET Request Method With Sensitive Query Strings
Affected Products
| Product | Versions |
|---|---|
flextypeflextype |
|
References
- GitHub Issue #598issue-tracking
- https://github.com/flextype/flextypeproduct
- https://github.com/flextype/flextype/blob/v1.0.0-alpha.3/src/flextype/core/Endpoints/Api.phptechnical-description
- VulnCheck Advisory: Flextype CMS through 1.0.0-alpha.3 API Token Exposure via Query Stringthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.