A vulnerability identified as problematic has been detected in CMS up to 3.7.15/4.1.15. The affected element is an unknown function of the component Configuration Handler. This manipulation causes incorrect authorization.

This vulnerability is tracked as CVE-2026-29179. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.