Главная → Уязвимости → CVE-2026-31266

7.3высокая

CVE-2026-31266

Описание

Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint (/actions/app/migrate).

CVSS

Балл	7.3 — высокая
Вектор	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Источники

https://github.com/0xrixet/cms-security-poc https://github.com/craftcms/cms https://github.com/0xrixet/Craftcms-PoC-CVE-2026-31266