Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 15:58:54 +0000 EUVD-2026-349328 https://cve.radiocsirt.org/vuln/euvd-2026-349328 EUVD-2026-349328 https://cve.radiocsirt.org/vuln/euvd-2026-349328 fkie_cve-2026-64664 https://cve.radiocsirt.org/vuln/fkie_cve-2026-64664 <p>Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and 6.24.0, an authenticated Control Panel user could use an endpoint intended for the user creation wizard to determine if a given email address belonged to an existing user, without having permission to view users, though the endpoint only exposed user existence and not any other user data. This issue is fixed in versions 5.74.1 and 6.24.0.</p> <p>Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and 6.24.0, an authenticated Control Panel user could use an endpoint intended for the user creation wizard to determine if a given email address belonged to an existing user, without having permission to view users, though the endpoint only exposed user existence and not any other user data. This issue is fixed in versions 5.74.1 and 6.24.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-64664 GHSA-225x-3jhx-wh4q — Statamic: Missing authorization on Control Panel endpoint allows disclosure of user existence https://cve.radiocsirt.org/vuln/ghsa-225x-3jhx-wh4q <p><strong>Affected:</strong> Packagist: statamic/cms</p> <p>### Impact An authenticated Control Panel user could use an endpoint intended for the user creation wizard to determine if a given email address belongs to an existing user, without having permission to view users.</p> <p>The endpoint only exposed user existence, not any of its data.</p> <p>### Patches This has been fixed in 5.74.1 and 6.24.0.</p> <p><strong>Affected:</strong> Packagist: statamic/cms</p> <p>### Impact An authenticated Control Panel user could use an endpoint intended for the user creation wizard to determine if a given email address belongs to an existing user, without having permission to view users.</p> <p>The endpoint only exposed user existence, not any of its data.</p> <p>### Patches This has been fixed in 5.74.1 and 6.24.0.</p> https://cve.radiocsirt.org/vuln/ghsa-225x-3jhx-wh4q