CVE-2026-23496
1 advisory.
Packagist/pimcore/web2print-tools-bundle CVE-2026-23496: medium 5.4
Pimcore Web2Print Tools Bundle "Favourite Output Channel Configuration" Missing Function Level Authorization
Action: Upgrade pimcore/web2print-tools-bundle to 5.2.2 or later.
composer require pimcore/web2print-tools-bundle:6.1.1composer require pimcore/web2print-tools-bundle:5.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0-RC1 | 6.1.1 | - |
| 0 | 5.2.2 | - |
Fixed versions
| 6.1.1 | 5.2.2 |
Sources
- osv: GHSA-4wg4-p27p-5q2r
- https://github.com/pimcore/pimcore/security/advisories/GHSA-4wg4-p27p-5q2r
- https://nvd.nist.gov/vuln/detail/CVE-2026-23496
- https://github.com/pimcore/web2print-tools/pull/108
- https://github.com/pimcore/web2print-tools/commit/7714452a04b9f9b077752784af4b8d0b05e464a1
- https://github.com/pimcore/pimcore
- https://github.com/pimcore/web2print-tools/releases/tag/v5.2.2
- https://github.com/pimcore/web2print-tools/releases/tag/v6.1.1
CVE-2026-23496 · published · modified · JSON