CVE-2016-9182

CVE-2016-9182 is a high-severity access bypass vulnerability affecting Exponent CMS 2.4. It allows an unauthenticated attacker to bypass permission checks by exploiting a case-insensitivity flaw in PHP reflection when calling controller methods. This allows unauthorized access to functionalities that should be restricted, leading to a potential impact of high integrity compromise. While no public exploit code or active exploitation is reported, the vulnerability is easily exploitable with low attack complexity and no user interaction required.