https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T03:55:22.430928+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-268263 EUVD-2026-268263 2026-10-20T03:55:22.433152+00:00 EUVD-2026-268263 https://cve.radiocsirt.org/vuln/fkie_cve-2026-25633 fkie_cve-2026-25633 2026-10-20T03:55:22.433198+00:00

Statamic is a, Laravel + Git powered CMS designed for building websites. Prior to 5.73.6 and 6.2.5, users without permission to view assets are able are able to download them and view their metadata. Logged-out users and users without permission to access the control panel are unable to take advantage of this. This has been fixed in 5.73.6 and 6.2.5.

 https://cve.radiocsirt.org/vuln/ghsa-gwmx-9gcj-332h GHSA-gwmx-9gcj-332h — Statamic CMS's missing authorization allows access to assets 2026-10-20T03:55:22.433231+00:00

Affected: Packagist: statamic/cms

### Impact Users without permission to view assets are able are able to download them and view their metadata.

Logged-out users and users without permission to access the control panel are unable to take advantage of this.

### Patches This has been fixed in 5.73.6 and 6.2.5.