World Wires · story 57950 · official · 1 source(s)

CVE-2026-112776: authorization bypass in Craft CMS

Craft CMS versions 5.0.0 through 5.10.x contain an authorization bypass vulnerability allowing site-scoped GraphQL tokens to mutate, create, and delete con

Open in the desk

Coverage

• CVE-2026-112776: authorization bypass in Craft CMS NVD: critical CVEs · tier A · clear net · 2026-10-19 20:17 UTC

What this site indexes