https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-08T18:03:35.929354+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-124427 fkie_cve-2026-124427 2026-11-08T18:03:35.931346+00:00

Craft CMS from 5.0.0 before 5.11.2 contains an authorization bypass vulnerability that allows anonymous GraphQL clients to read out-of-scope section entries via prev/next fields. Attackers can chain next hops from one visible in-scope entry to enumerate entries and read titles, slugs, and custom-field content from withheld sections.

 https://db.gcve.eu/vuln/ghsa-rw7p-j29f-9hjr GHSA-rw7p-j29f-9hjr 2026-11-08T18:03:35.931397+00:00

Craft CMS from 5.0.0 before 5.11.2 contains an authorization bypass vulnerability that allows anonymous GraphQL clients to read out-of-scope section entries via prev/next fields. Attackers can chain next hops from one visible in-scope entry to enumerate entries and read titles, slugs, and custom-field content from withheld sections.