https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T12:12:15.681452+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-231650 EUVD-2026-231650 2026-10-16T12:12:15.684050+00:00 EUVD-2026-231650 https://cve.radiocsirt.org/vuln/fkie_cve-2024-21622 fkie_cve-2024-21622 2026-10-16T12:12:15.684105+00:00

Craft is a content management system. This is a potential moderate impact, low complexity privilege escalation vulnerability in Craft starting in 3.x prior to 3.9.6 and 4.x prior to 4.4.16 with certain user permissions setups. This has been fixed in Craft 4.4.16 and Craft 3.9.6. Users should ensure they are running at least those versions.

 https://cve.radiocsirt.org/vuln/ghsa-j5g9-j7r4-6qvx GHSA-j5g9-j7r4-6qvx — Craft CMS Privilege Escalation 2026-10-16T12:12:15.684136+00:00

Affected: Packagist: craftcms/cms

### Impact

This is a potential moderate impact, low complexity privilege escalation vulnerability in Craft with certain user permissions setups.

### Patches

This has been fixed in Craft 4.4.16 and Craft 3.9.6. Users should ensure they are running at least those versions.

### References

https://github.com/craftcms/cms/pull/13932 https://github.com/craftcms/cms/pull/13931 https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#4511---2023-11-16 https://github.com/craftcms/cms/blob/v3/CHANGELOG.md#396---2023-11-16

 https://cve.radiocsirt.org/vuln/gsd-2024-21622 gsd-2024-21622 2026-10-16T12:12:15.684166+00:00 gsd-2024-21622