CVE-2026-107850
1 advisory.
Packagist/contao/core-bundle CVE-2026-107850: medium 4.3, EPSS 0.19%
Contao: Improper access control in the preview links module
Action: Upgrade contao/core-bundle to 5.7.12 or later.
composer require contao/core-bundle:5.7.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.7.1 | 5.7.12 | - |
Fixed versions
| 5.7.12 |
Sources
- osv: GHSA-q6wp-fr43-gm9v
- https://github.com/contao/contao/security/advisories/GHSA-q6wp-fr43-gm9v
- https://github.com/contao/contao/commit/6b483d380a4b2dc61432c4c697e411508f93bf91
- https://github.com/contao/contao
- https://github.com/contao/contao/releases/tag/5.7.12
CVE-2026-107850 · published · modified · JSON