Veille CVE

Vendredi 11 septembre 2026

1 CVE

  1. CVE-2026-79987 8.8 Élevée

    craftcms cms

    A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating system commands as the PHP web worker.