Subdomain Takeover — Proof of Concept

This host is served by an unauthorized party.
docs-old.authorium.com is vulnerable.

Discovered & demonstrated by Yash__Hackz — reported under the Authorium Vulnerability Disclosure Program.

Root cause

A dangling DNS record: docs-old.authorium.com CNAMEs to authoriumdpa-authorium-docs.pages.dev, a deleted Cloudflare Pages project. The project name was re-registered by the researcher, taking control of the subdomain.

Proof token

authorium-vrp-poc-20260915-94440baa

This page is benign. No Authorium data was accessed, no visitors are logged or tracked, and it will be removed as soon as the finding is confirmed and the DNS record is fixed.