CVE-2019-11018

CVE-2019-11018 is a critical authentication bypass vulnerability affecting ThinkAdmin V4.0. It allows an attacker to maintain access to an administrator's account using previously obtained cookie-based credentials even after the administrator changes their password. This vulnerability has a CVSS score of 9.8, indicating a critical risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the potential for complete system compromise remains high.