[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-53952":6},{"stargazers_count":4,"fetched_at":5},7,"2026-09-12T01:55:19.833Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":680,"aliases":681,"duplicate_of":9,"upstream":682,"downstream":683,"duplicates":684,"related":685,"reserved_at":9,"published_at":686,"modified_at":686,"state":687,"summary":688,"references_raw":697,"kevs":704,"epss":705,"epss_history":708,"metrics":716,"affected":723},"CVE-2026-53952","GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. A logic flaw in GetSimple CMS (v3.4.0a and below) and GetSimpleCMS-CE (v3.3.22 and below) allows unauthenticated attackers to create a new administrator account. The application features an automated security control designed to delete the sensitive `admin/setup.php` file post-installation. However, this control is neutralized by a self-exclusion bug within the deletion logic, leaving the setup script accessible for unauthorized account creation even after a legitimate installation is completed. As of time of publication, no known patched versions are available.",null,[11,641,667],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-285","Improper Authorization","The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.","weakness","Draft","Class","High",[20,68,72,131,276,318,322,326,330,334,338,342,509,599,629,633,637],{"id":21,"name":22,"techniques":23},"CAPEC-1","Accessing Functionality Not Properly Constrained by ACLs",[24],{"id":25,"name":26,"tactics":27,"countermeasures":43},"T1574.010","Services File Permissions Weakness",[28,31,34,37,40],{"id":29,"name":30},"TA0110","Persistence",{"id":32,"name":33},"TA0111","Privilege Escalation",{"id":35,"name":36},"TA0030","Defense Evasion",{"id":38,"name":39},"TA0005","Stealth",{"id":41,"name":42},"TA0104","Execution",[44,49,54,59,63],{"id":45,"name":46,"tactic":47},"D3-RS","Restore Software",{"name":48},"Restore",{"id":50,"name":51,"tactic":52},"D3-SWI","Software Inventory",{"name":53},"Model",{"id":55,"name":56,"tactic":57},"D3-SBV","Service Binary Verification",{"name":58},"Detect",{"id":60,"name":61,"tactic":62},"D3-AVE","Asset Vulnerability Enumeration",{"name":53},{"id":64,"name":65,"tactic":66},"D3-SU","Software Update",{"name":67},"Harden",{"id":69,"name":70,"techniques":71},"CAPEC-104","Cross Zone Scripting",[],{"id":73,"name":74,"techniques":75},"CAPEC-127","Directory Indexing",[76],{"id":77,"name":78,"tactics":79,"countermeasures":83},"T1083","File and Directory Discovery",[80],{"id":81,"name":82},"TA0102","Discovery",[84,89,93,98,102,106,110,114,118,122,126],{"id":85,"name":86,"tactic":87},"D3-CQ","Content Quarantine",{"name":88},"Isolate",{"id":90,"name":91,"tactic":92},"D3-FE","File Encryption",{"name":67},{"id":94,"name":95,"tactic":96},"D3-DF","Decoy File",{"name":97},"Deceive",{"id":99,"name":100,"tactic":101},"D3-FA","File Analysis",{"name":58},{"id":103,"name":104,"tactic":105},"D3-FIM","File Integrity Monitoring",{"name":58},{"id":107,"name":108,"tactic":109},"D3-LFP","Local File Permissions",{"name":88},{"id":111,"name":112,"tactic":113},"D3-CF","Content Filtering",{"name":88},{"id":115,"name":116,"tactic":117},"D3-RFAM","Remote File Access Mediation",{"name":88},{"id":119,"name":120,"tactic":121},"D3-RF","Restore File",{"name":48},{"id":123,"name":124,"tactic":125},"D3-CM","Content Modification",{"name":88},{"id":127,"name":128,"tactic":129},"D3-FEV","File Eviction",{"name":130},"Evict",{"id":132,"name":133,"techniques":134},"CAPEC-13","Subverting Environment Variable Values",[135,200,236],{"id":136,"name":137,"tactics":138,"countermeasures":141},"T1562.003","Impair Command History Logging",[139,140],{"id":35,"name":36},{"id":38,"name":39},[142,144,146,150,152,154,158,162,166,168,170,174,178,180,182,184,188,190,192,196],{"id":119,"name":120,"tactic":143},{"name":48},{"id":85,"name":86,"tactic":145},{"name":88},{"id":147,"name":148,"tactic":149},"D3-CI","Configuration Inventory",{"name":53},{"id":94,"name":95,"tactic":151},{"name":97},{"id":99,"name":100,"tactic":153},{"name":58},{"id":155,"name":156,"tactic":157},"D3-DRA","Disable Remote Access",{"name":67},{"id":159,"name":160,"tactic":161},"D3-ACH","Application Configuration Hardening",{"name":67},{"id":163,"name":164,"tactic":165},"D3-RC","Restore Configuration",{"name":48},{"id":90,"name":91,"tactic":167},{"name":67},{"id":103,"name":104,"tactic":169},{"name":58},{"id":171,"name":172,"tactic":173},"D3-RKD","Registry Key Deletion",{"name":130},{"id":175,"name":176,"tactic":177},"D3-DA","Dynamic Analysis",{"name":58},{"id":111,"name":112,"tactic":179},{"name":88},{"id":107,"name":108,"tactic":181},{"name":88},{"id":127,"name":128,"tactic":183},{"name":130},{"id":185,"name":186,"tactic":187},"D3-EFA","Emulated File Analysis",{"name":58},{"id":115,"name":116,"tactic":189},{"name":88},{"id":123,"name":124,"tactic":191},{"name":88},{"id":193,"name":194,"tactic":195},"D3-EAL","Executable Allowlisting",{"name":88},{"id":197,"name":198,"tactic":199},"D3-EDL","Executable Denylisting",{"name":88},{"id":201,"name":202,"tactics":203,"countermeasures":209},"T1574.006","Dynamic Linker Hijacking",[204,205,206,207,208],{"id":29,"name":30},{"id":32,"name":33},{"id":35,"name":36},{"id":38,"name":39},{"id":41,"name":42},[210,212,214,216,220,222,224,226,228,230,232,234],{"id":123,"name":124,"tactic":211},{"name":88},{"id":127,"name":128,"tactic":213},{"name":130},{"id":99,"name":100,"tactic":215},{"name":58},{"id":217,"name":218,"tactic":219},"D3-SFA","System File Analysis",{"name":58},{"id":119,"name":120,"tactic":221},{"name":48},{"id":111,"name":112,"tactic":223},{"name":88},{"id":107,"name":108,"tactic":225},{"name":88},{"id":90,"name":91,"tactic":227},{"name":67},{"id":115,"name":116,"tactic":229},{"name":88},{"id":85,"name":86,"tactic":231},{"name":88},{"id":94,"name":95,"tactic":233},{"name":97},{"id":103,"name":104,"tactic":235},{"name":58},{"id":237,"name":238,"tactics":239,"countermeasures":245},"T1574.007","Path Interception by PATH Environment Variable",[240,241,242,243,244],{"id":29,"name":30},{"id":32,"name":33},{"id":35,"name":36},{"id":38,"name":39},{"id":41,"name":42},[246,248,250,252,254,256,258,260,262,264,266,268,270,272,274],{"id":123,"name":124,"tactic":247},{"name":88},{"id":99,"name":100,"tactic":249},{"name":58},{"id":94,"name":95,"tactic":251},{"name":97},{"id":111,"name":112,"tactic":253},{"name":88},{"id":127,"name":128,"tactic":255},{"name":130},{"id":103,"name":104,"tactic":257},{"name":58},{"id":107,"name":108,"tactic":259},{"name":88},{"id":90,"name":91,"tactic":261},{"name":67},{"id":193,"name":194,"tactic":263},{"name":88},{"id":175,"name":176,"tactic":265},{"name":58},{"id":115,"name":116,"tactic":267},{"name":88},{"id":197,"name":198,"tactic":269},{"name":88},{"id":185,"name":186,"tactic":271},{"name":58},{"id":85,"name":86,"tactic":273},{"name":88},{"id":119,"name":120,"tactic":275},{"name":48},{"id":277,"name":278,"techniques":279},"CAPEC-17","Using Malicious Files",[280,300],{"id":281,"name":282,"tactics":283,"countermeasures":289},"T1574.005","Executable Installer File Permissions Weakness",[284,285,286,287,288],{"id":29,"name":30},{"id":32,"name":33},{"id":35,"name":36},{"id":38,"name":39},{"id":41,"name":42},[290,292,294,296,298],{"id":64,"name":65,"tactic":291},{"name":67},{"id":45,"name":46,"tactic":293},{"name":48},{"id":60,"name":61,"tactic":295},{"name":53},{"id":50,"name":51,"tactic":297},{"name":53},{"id":55,"name":56,"tactic":299},{"name":58},{"id":25,"name":26,"tactics":301,"countermeasures":307},[302,303,304,305,306],{"id":29,"name":30},{"id":32,"name":33},{"id":35,"name":36},{"id":38,"name":39},{"id":41,"name":42},[308,310,312,314,316],{"id":45,"name":46,"tactic":309},{"name":48},{"id":50,"name":51,"tactic":311},{"name":53},{"id":55,"name":56,"tactic":313},{"name":58},{"id":60,"name":61,"tactic":315},{"name":53},{"id":64,"name":65,"tactic":317},{"name":67},{"id":319,"name":320,"techniques":321},"CAPEC-39","Manipulating Opaque Client-based Data Tokens",[],{"id":323,"name":324,"techniques":325},"CAPEC-402","Bypassing ATA Password Security",[],{"id":327,"name":328,"techniques":329},"CAPEC-45","Buffer Overflow via Symbolic Links",[],{"id":331,"name":332,"techniques":333},"CAPEC-5","Blue Boxing",[],{"id":335,"name":336,"techniques":337},"CAPEC-51","Poison Web Service Registry",[],{"id":339,"name":340,"techniques":341},"CAPEC-59","Session Credential Falsification through Prediction",[],{"id":343,"name":344,"techniques":345},"CAPEC-60","Reusing Session IDs (aka Session Replay)",[346,398],{"id":347,"name":348,"tactics":349,"countermeasures":353},"T1134.001","Token Impersonation/Theft",[350,351,352],{"id":35,"name":36},{"id":38,"name":39},{"id":32,"name":33},[354,358,362,366,370,374,378,382,386,390,394],{"id":355,"name":356,"tactic":357},"D3-CR","Credential Revocation",{"name":130},{"id":359,"name":360,"tactic":361},"D3-CCSA","Credential Compromise Scope Analysis",{"name":58},{"id":363,"name":364,"tactic":365},"D3-CTS","Credential Transmission Scoping",{"name":88},{"id":367,"name":368,"tactic":369},"D3-ANCI","Authentication Cache Invalidation",{"name":130},{"id":371,"name":372,"tactic":373},"D3-TB","Token Binding",{"name":67},{"id":375,"name":376,"tactic":377},"D3-TBA","Token-based Authentication",{"name":67},{"id":379,"name":380,"tactic":381},"D3-DUC","Decoy User Credential",{"name":97},{"id":383,"name":384,"tactic":385},"D3-CH","Credential Hardening",{"name":67},{"id":387,"name":388,"tactic":389},"D3-CRO","Credential Rotation",{"name":67},{"id":391,"name":392,"tactic":393},"D3-MFA","Multi-factor Authentication",{"name":67},{"id":395,"name":396,"tactic":397},"D3-RIC","Reissue Credential",{"name":48},{"id":399,"name":400,"tactics":401,"countermeasures":406},"T1550.004","Web Session Cookie",[402,403],{"id":35,"name":36},{"id":404,"name":405},"TA0109","Lateral Movement",[407,409,413,415,417,421,425,429,433,437,441,445,449,453,457,459,463,465,469,471,475,479,481,483,487,491,495,497,501,505],{"id":387,"name":388,"tactic":408},{"name":67},{"id":410,"name":411,"tactic":412},"D3-SCF","System Call Filtering",{"name":88},{"id":395,"name":396,"tactic":414},{"name":48},{"id":363,"name":364,"tactic":416},{"name":88},{"id":418,"name":419,"tactic":420},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":58},{"id":422,"name":423,"tactic":424},"D3-APCA","Application Protocol Command Analysis",{"name":58},{"id":426,"name":427,"tactic":428},"D3-PSMD","Process Self-Modification Detection",{"name":58},{"id":430,"name":431,"tactic":432},"D3-RTSD","Remote Terminal Session Detection",{"name":58},{"id":434,"name":435,"tactic":436},"D3-PSA","Process Spawn Analysis",{"name":58},{"id":438,"name":439,"tactic":440},"D3-HBPI","Hardware-based Process Isolation",{"name":88},{"id":442,"name":443,"tactic":444},"D3-KBPI","Kernel-based Process Isolation",{"name":88},{"id":446,"name":447,"tactic":448},"D3-ABPI","Application-based Process Isolation",{"name":88},{"id":450,"name":451,"tactic":452},"D3-HS","Host Shutdown",{"name":130},{"id":454,"name":455,"tactic":456},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":58},{"id":355,"name":356,"tactic":458},{"name":130},{"id":460,"name":461,"tactic":462},"D3-HR","Host Reboot",{"name":130},{"id":359,"name":360,"tactic":464},{"name":58},{"id":466,"name":467,"tactic":468},"D3-NTF","Network Traffic Filtering",{"name":88},{"id":379,"name":380,"tactic":470},{"name":97},{"id":472,"name":473,"tactic":474},"D3-CSPP","Client-server Payload Profiling",{"name":58},{"id":476,"name":477,"tactic":478},"D3-PT","Process Termination",{"name":130},{"id":383,"name":384,"tactic":480},{"name":67},{"id":391,"name":392,"tactic":482},{"name":67},{"id":484,"name":485,"tactic":486},"D3-PLA","Process Lineage Analysis",{"name":58},{"id":488,"name":489,"tactic":490},"D3-NTCD","Network Traffic Community Deviation",{"name":58},{"id":492,"name":493,"tactic":494},"D3-PS","Process Suspension",{"name":130},{"id":367,"name":368,"tactic":496},{"name":130},{"id":498,"name":499,"tactic":500},"D3-NTSA","Network Traffic Signature Analysis",{"name":58},{"id":502,"name":503,"tactic":504},"D3-WSAM","Web Session Access Mediation",{"name":88},{"id":506,"name":507,"tactic":508},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":58},{"id":510,"name":511,"techniques":512},"CAPEC-647","Collect Data from Registries",[513,543,567],{"id":514,"name":515,"tactics":516,"countermeasures":520},"T1005","Data from Local System",[517],{"id":518,"name":519},"TA0100","Collection",[521,523,525,527,529,531,533,535,537,539,541],{"id":111,"name":112,"tactic":522},{"name":88},{"id":94,"name":95,"tactic":524},{"name":97},{"id":119,"name":120,"tactic":526},{"name":48},{"id":107,"name":108,"tactic":528},{"name":88},{"id":127,"name":128,"tactic":530},{"name":130},{"id":115,"name":116,"tactic":532},{"name":88},{"id":99,"name":100,"tactic":534},{"name":58},{"id":123,"name":124,"tactic":536},{"name":88},{"id":90,"name":91,"tactic":538},{"name":67},{"id":103,"name":104,"tactic":540},{"name":58},{"id":85,"name":86,"tactic":542},{"name":88},{"id":544,"name":545,"tactics":546,"countermeasures":548},"T1012","Query Registry",[547],{"id":81,"name":82},[549,553,555,559,563],{"id":550,"name":551,"tactic":552},"D3-SCP","System Configuration Permissions",{"name":67},{"id":410,"name":411,"tactic":554},{"name":88},{"id":556,"name":557,"tactic":558},"D3-SCA","System Call Analysis",{"name":58},{"id":560,"name":561,"tactic":562},"D3-RD","Restore Database",{"name":48},{"id":564,"name":565,"tactic":566},"D3-DI","Data Inventory",{"name":53},{"id":568,"name":569,"tactics":570,"countermeasures":574},"T1552.002","Credentials in Registry",[571],{"id":572,"name":573},"TA0031","Credential Access",[575,577,579,581,583,585,587,589,591,593,595,597],{"id":395,"name":396,"tactic":576},{"name":48},{"id":359,"name":360,"tactic":578},{"name":58},{"id":391,"name":392,"tactic":580},{"name":67},{"id":383,"name":384,"tactic":582},{"name":67},{"id":363,"name":364,"tactic":584},{"name":88},{"id":355,"name":356,"tactic":586},{"name":130},{"id":550,"name":551,"tactic":588},{"name":67},{"id":367,"name":368,"tactic":590},{"name":130},{"id":387,"name":388,"tactic":592},{"name":67},{"id":560,"name":561,"tactic":594},{"name":48},{"id":379,"name":380,"tactic":596},{"name":97},{"id":564,"name":565,"tactic":598},{"name":53},{"id":600,"name":601,"techniques":602},"CAPEC-668","Key Negotiation of Bluetooth Attack (KNOB)",[603],{"id":604,"name":605,"tactics":606,"countermeasures":610},"T1565.002","Transmitted Data Manipulation",[607],{"id":608,"name":609},"TA0105","Impact",[611,613,615,617,619,621,623,625,627],{"id":498,"name":499,"tactic":612},{"name":58},{"id":430,"name":431,"tactic":614},{"name":58},{"id":466,"name":467,"tactic":616},{"name":88},{"id":454,"name":455,"tactic":618},{"name":58},{"id":422,"name":423,"tactic":620},{"name":58},{"id":472,"name":473,"tactic":622},{"name":58},{"id":418,"name":419,"tactic":624},{"name":58},{"id":488,"name":489,"tactic":626},{"name":58},{"id":506,"name":507,"tactic":628},{"name":58},{"id":630,"name":631,"techniques":632},"CAPEC-76","Manipulating Web Input to File System Calls",[],{"id":634,"name":635,"techniques":636},"CAPEC-77","Manipulating User-Controlled Variables",[],{"id":638,"name":639,"techniques":640},"CAPEC-87","Forceful Browsing",[],{"_key":642,"id":642,"name":643,"description":644,"type":15,"status":16,"abstraction":645,"likelihood_of_exploit":18,"capec":646},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","Base",[647,651,655,659,663],{"id":648,"name":649,"techniques":650},"CAPEC-12","Choosing Message Identifier",[],{"id":652,"name":653,"techniques":654},"CAPEC-166","Force the System to Reset Values",[],{"id":656,"name":657,"techniques":658},"CAPEC-216","Communication Channel Manipulation",[],{"id":660,"name":661,"techniques":662},"CAPEC-36","Using Unpublished Interfaces or Functionality",[],{"id":664,"name":665,"techniques":666},"CAPEC-62","Cross Site Request Forgery",[],{"_key":668,"id":668,"name":669,"description":670,"type":15,"status":16,"abstraction":645,"likelihood_of_exploit":9,"capec":671},"CWE-489","Active Debug Code","The product is released with debugging code still enabled or active.",[672,676],{"id":673,"name":674,"techniques":675},"CAPEC-121","Exploit Non-Production Interfaces",[],{"id":677,"name":678,"techniques":679},"CAPEC-661","Root/Jailbreak Detection Evasion via Debugging",[],[],[],[],[],[],[],"2026-09-11T19:23:30.889Z","Received",{"cisa_kev":689,"cisa_ransomware":689,"cisa_vendor":9,"epss_severity":690,"epss_score":691,"severity":692,"severity_score":693,"severity_version":694,"severity_source":695,"severity_vector":696,"severity_status":687},false,"low",0.00221,"critical",9.8,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[698],{"url":699,"sources":700,"tags":702},"https://github.com/GetSimpleCMS-CE/GetSimpleCMS-CE/security/advisories/GHSA-rw2c-w4mg-46g4",[695,701],"nvd",[703],"X Refsource CONFIRM",[],{"date":706,"score":691,"percentile":707},"2026-06-14",0.4497,[709,712,715],{"date":710,"score":691,"percentile":711},"2026-06-12",0.44969,{"date":713,"score":691,"percentile":714},"2026-06-13",0.44983,{"date":706,"score":691,"percentile":707},[717,721],{"source":695,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":718,"cvss_v4_0":9},{"baseScore":693,"baseSeverity":719,"vectorString":696,"impactScore":693,"exploitabilityScore":720},"CRITICAL",10,{"source":701,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":722,"cvss_v4_0":9},{"baseScore":693,"baseSeverity":719,"vectorString":696,"impactScore":693,"exploitabilityScore":720},[724,734],{"ecosystem":9,"name":725,"vendor":726,"product":726,"cpe_part":727,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":728},"GetSimpleCMS-CE","getsimplecms-ce","a",[729],{"version":730,"is_range":731,"range_type":695,"version_start":9,"version_start_type":9,"version_end":732,"version_end_type":733,"fixed_in":9},"\u003C= 3.3.22",true,"3.3.22","including",{"ecosystem":9,"name":735,"vendor":736,"product":736,"cpe_part":727,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":737},"GetSimpleCMS","getsimplecms",[738],{"version":739,"is_range":731,"range_type":695,"version_start":9,"version_start_type":9,"version_end":740,"version_end_type":733,"fixed_in":9},"\u003C= 3.4.0a","3.4.0a"]