https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 16:53:55 +0000 https://db.gcve.eu/vuln/cve-2026-59075 <p><strong>Affected:</strong> Edito CMS</p> <p>Edito CMS is vulnerable to Dynamic LINQ injection. Due to improper input validation, an authenticated attacker can inject conditional expressions into the sort parameter of paginated administrative endpoints. Analyzing the returned result order allows the attacker to extract value of any field character by character, leading to potential exposure of sensitive data.</p> <p>This issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released.</p> <p><strong>Affected:</strong> Edito CMS</p> <p>Edito CMS is vulnerable to Dynamic LINQ injection. Due to improper input validation, an authenticated attacker can inject conditional expressions into the sort parameter of paginated administrative endpoints. Analyzing the returned result order allows the attacker to extract value of any field character by character, leading to potential exposure of sensitive data.</p> <p>This issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released.</p> https://db.gcve.eu/vuln/cve-2026-59075