https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T06:40:21.172514+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-25633 CVE-2026-25633 — Statamic's missing authorization allows access to assets 2026-10-20T06:40:21.173691+00:00

Affected: statamic cms

Statamic is a, Laravel + Git powered CMS designed for building websites. Prior to 5.73.6 and 6.2.5, users without permission to view assets are able are able to download them and view their metadata. Logged-out users and users without permission to access the control panel are unable to take advantage of this. This has been fixed in 5.73.6 and 6.2.5.