Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 18:47:31 +0000 CVE-2026-33162 — Craft CMS: Authorization bypass in "entries/move-to-section" allows control panel user to move entries without section… https://cve.radiocsirt.org/vuln/cve-2026-33162 <p><strong>Affected:</strong> craftcms cms</p> <p>Craft CMS is a content management system (CMS). From version 5.3.0 to before version 5.9.14, an authenticated control panel user with only accessCp can move entries across sections via POST /actions/entries/move-to-section, even when they do not have saveEntries:{sectionUid} permission for either source or destination section. This issue has been patched in version 5.9.14.</p> <p><strong>Affected:</strong> craftcms cms</p> <p>Craft CMS is a content management system (CMS). From version 5.3.0 to before version 5.9.14, an authenticated control panel user with only accessCp can move entries across sections via POST /actions/entries/move-to-section, even when they do not have saveEntries:{sectionUid} permission for either source or destination section. This issue has been patched in version 5.9.14.</p> https://cve.radiocsirt.org/vuln/cve-2026-33162