An unauthenticated remote code execution or unauthorized access vulnerability in Feehi CMS poses a critical risk due to confirmed exploitation in the wild.

The vulnerability resides in the REST API endpoint /api/articles, which lacks sufficient authentication mechanisms. This allows an unauthenticated attacker to remotely manipulate sensitive content management operations.

The vulnerability carries a CVSS score of 7.3, reflecting a high risk of unauthorized data modification or system compromise. Successful exploitation could lead to the unauthorized alteration of web content, exposure of sensitive data, or complete loss of control over the content management system, potentially resulting in significant reputational damage and service disruption.

Immediate Action: As there is currently no official patch, organizations should immediately restrict access to the /api/articles REST API endpoint via network-level controls or by disabling the affected functionality if not required.

Proactive Monitoring: Monitor web application logs for suspicious requests directed at the /api/articles endpoint, specifically looking for anomalous POST or DELETE methods originating from unauthorized IP addresses.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to block or filter requests to the /api/articles endpoint for all unauthenticated traffic.

Public Exploit Available: true

The presence of active exploitation in the wild renders this vulnerability extremely dangerous. Organizations currently running Feehi CMS versions up to 2.1.1 must treat this as a high-priority incident and apply network-level blocks to the vulnerable API endpoint immediately. Monitor vendor communications closely for the eventual release of a security patch.