https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-08T18:56:09.905242+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-124427 CVE-2026-124427 — Craft CMS 5.0.0 before 5.11.2 GraphQL Schema Scope Bypass via prev/next 2026-11-08T18:56:09.906689+00:00

Affected: craftcms cms

Craft CMS from 5.0.0 before 5.11.2 contains an authorization bypass vulnerability that allows anonymous GraphQL clients to read out-of-scope section entries via prev/next fields. Attackers can chain next hops from one visible in-scope entry to enumerate entries and read titles, slugs, and custom-field content from withheld sections.