CVE-2026-67207 wolfcms CVE debrief

Who should care

Users of Wolf CMS 0.8.3.1, administrators of web applications, security teams monitoring for potential exploitation of authorization bypass vulnerabilities, and operators responsible for vulnerability management and patching should be aware of this vulnerability. They should verify the presence of Wolf CMS 0.8.3.1 in their environments and review access controls for BackupRestoreController.

Technical summary

The authorization bypass vulnerability in Wolf CMS 0.8.3.1 is caused by a PHP operator precedence flaw in the permission check expression of BackupRestoreController. This allows authenticated non-administrative users to create, download, and restore backups without administrative privileges. The vulnerability impacts web applications using Wolf CMS 0.8.3.1, particularly those with exposed BackupRestoreController functionality.

Defensive priority

Authenticated non-administrative users can exploit an authorization bypass vulnerability in Wolf CMS 0.8.3.1 to access restricted backup functionality. Verify and restrict BackupRestoreController access.

Recommended defensive actions

• Verify and restrict access to BackupRestoreController
• Inventory Wolf CMS installations for potential exposure
• Monitor for suspicious backup activity
• Apply vendor patches when available
• Implement compensating controls for backup functionality

Evidence notes

The CVE-2026-67207 record indicates an authorization bypass vulnerability in Wolf CMS 0.8.3.1 due to a PHP operator precedence flaw. Limited information is available on affected scope and vendor remediation. Defenders should verify the existence of Wolf CMS 0.8.3.1 deployments, review BackupRestoreController access controls, and monitor for suspicious backup activity. Evidence is limited to CVE and NVD details.

Official resources