CVE ID :CVE-2026-56382 Published : June 21, 2026, 1:26 p.m. | 1 hour, 43 minutes ago Description :Craft CMS (composer package craftcms/cms) versions >= 5.5.0 and <= 5.9.13 contain a remote code execution vulnerability in the FieldsController::actionRenderCardPreview() method, which passes the...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-56382 - Craft CMS - Remote Code Execution via Missing Config Sanitization in FieldsController

VERWANDTEARTIKEL

CVE-2026-56397 - SiYuan - Remote Code Execution via Malicious Bazaar Package Metadata and README

CVE-2026-56396 - phpMyFAQ - Privilege Escalation via Missing Authorization in editUser() and updateUserRights()

CVE-2026-56253 - Capgo - Unauthenticated Organization Member Email Disclosure via get_org_members RPC

CVE-2026-56265 - Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key

CVE-2026-56242 - Capgo - Unauthenticated API Key Validity Oracle and User Identity Disclosure via get_identity_apikey_only RPC

CVE-2025-71378 - picklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle Files