{"uuid": "bc73e321-0324-4356-be48-35381e2eabbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8347", "type": "seen", "source": "https://t.me/hacking_Attack/192729", "content": "CVE-2026-8347 \u2014 Updated!\n\nCVE-2026-8347 is an Insecure Direct Object Reference (IDOR) combined with a wrong authorization level vulnerability in Concrete CMS versions 9.5.0 and earlier. The flaw exists in the Express association Reorder dialog, allowing a user with only view permissions on an Express entry to modify the ordering of associations for another entity.\nRead more...", "creation_timestamp": "2026-09-06T14:00:06.118337Z"}