CVE-2026-55416
1 advisory.
Packagist/pimcore/pimcore CVE-2026-55416: high 8.8
Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration
Action: Upgrade pimcore/pimcore to 11.5.19 or later.
composer require pimcore/pimcore:2026.1.6composer require pimcore/pimcore:12.3.10composer require pimcore/pimcore:11.5.19Affected
| introduced | fixed | last affected |
|---|---|---|
| 2026.1.0 | 2026.1.6 | - |
| 12.0.0-RC1 | 12.3.10 | - |
| 0 | 11.5.19 | - |
Fixed versions
| 2026.1.6 | 12.3.10 | 11.5.19 |
Sources
- osv: GHSA-23rh-xw42-fq82
- https://github.com/pimcore/pimcore/security/advisories/GHSA-23rh-xw42-fq82
- https://github.com/pimcore/pimcore
- https://github.com/pimcore/pimcore/releases/tag/v11.5.19
- https://github.com/pimcore/pimcore/releases/tag/v12.3.10
- https://github.com/pimcore/pimcore/releases/tag/v2026.1.6
CVE-2026-55416 · published · modified · JSON