{"action":"Upgrade pimcore/web2print-tools-bundle to 5.2.2 or later.","affected":[{"fixed":"6.1.1","introduced":"6.0.0-RC1"},{"fixed":"5.2.2","introduced":"0"}],"component":"pimcore/web2print-tools-bundle","cve_ids":["CVE-2026-23496"],"ecosystem":"Packagist","epss":0.00288,"exploited":false,"fixed_versions":["6.1.1","5.2.2"],"ghsa_id":"GHSA-4wg4-p27p-5q2r","id":"tcs_01M5KEVCWAGFV7PT414YMS84JT","modified_at":"2026-02-03T03:17:39.587373Z","published_at":"2026-01-15T18:14:17Z","references":["https://osv.dev/vulnerability/GHSA-4wg4-p27p-5q2r","https://github.com/pimcore/pimcore/security/advisories/GHSA-4wg4-p27p-5q2r","https://nvd.nist.gov/vuln/detail/CVE-2026-23496","https://github.com/pimcore/web2print-tools/pull/108","https://github.com/pimcore/web2print-tools/commit/7714452a04b9f9b077752784af4b8d0b05e464a1","https://github.com/pimcore/pimcore","https://github.com/pimcore/web2print-tools/releases/tag/v5.2.2","https://github.com/pimcore/web2print-tools/releases/tag/v6.1.1"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-4wg4-p27p-5q2r","url":"https://osv.dev/vulnerability/GHSA-4wg4-p27p-5q2r"}],"summary":"Pimcore Web2Print Tools Bundle \"Favourite Output Channel Configuration\" Missing Function Level Authorization"}