HIGHCVSS v4 8.4Vulnerability
CVE-2026-59081
Edito CMS deserializes JSON data without further validation. A user (even an administrator) cannot exploit this vulnerability through the application's normal functionality. An attacker who could modify cache entries or inject them could execute code on the server. This issue was fixed in version 5.10.2607. Hotfixes for older versions (5.8) have also been released.
Properties
- First seen
- 2026-11-13T19:33:42+00:00
- Epss score
- 0.0014
- Cvss score
- 8.4
- Last seen
- 2026-11-13T19:33:42+00:00
- Euvd assigner
- CERT-PL
- Retrieved at
- 2026-11-14T01:34:22+00:00
- Src batch id
- euvd-20261114T013402Z-e85a10
- Source url
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-124883
- Score
- 8.4
- Euvd base score version
- 4.0
- Fetched at
- 2026-11-14T01:34:22+00:00
- Euvd vendor
- Edito
- Cvss vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- First seen by Signal
- 2026-11-13T17:31:47+00:00
- Euvd base score
- 8.4
- Vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Content hash
- afb083c0d8b3ff2654fa4e459d9871d0e045fc14f58159c431fa71f209ee649d
- Published at
- 2026-11-13T08:17:18.353
- Euvd updated
- 2026-11-13T19:33:42+00:00
- Last modified
- 2026-11-13T20:18:59.560
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph