https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T04:15:41.635444+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-278135 EUVD-2026-278135 2026-10-07T04:15:41.702103+00:00 EUVD-2026-278135 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33884 fkie_cve-2026-33884 2026-10-07T04:15:41.702144+00:00

Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.16 and 6.7.2, an authenticated Control Panel user with access to live preview could use a live preview token to access restricted content that the token was not intended for. This has been fixed in 5.73.16 and 6.7.2.

 https://cve.radiocsirt.org/vuln/ghsa-8vwx-ccf6-5wg2 GHSA-8vwx-ccf6-5wg2 — Statamic's live preview token bypasses content protection for unrelated entries 2026-10-07T04:15:41.702180+00:00

Affected: Packagist: statamic/cms

### Impact An authenticated Control Panel user with access to live preview could use a live preview token to access restricted content that the token was not intended for.

### Patches This has been fixed in 5.73.16 and 6.7.2.