https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 15:13:25 +0000 https://cve.radiocsirt.org/vuln/cve-2026-41129 <p><strong>Affected:</strong> craftcms cms</p> <p>Craft CMS is a content management system (CMS). Versions on the 4.x branch through 4.17.8 and the 5.x branch through 5.9.14 are vulnerable to Server-Side Request Forgery. The exploitation requires a few permissions to be enabled in the used GraphQL schema: &#34;Edit assets in the &lt;VolumeName&gt; volume&#34; and &#34;Create assets in the &lt;VolumeName&gt; volume.&#34; Versions 4.17.9 and 5.9.15 patch the issue.</p> <p><strong>Affected:</strong> craftcms cms</p> <p>Craft CMS is a content management system (CMS). Versions on the 4.x branch through 4.17.8 and the 5.x branch through 5.9.14 are vulnerable to Server-Side Request Forgery. The exploitation requires a few permissions to be enabled in the used GraphQL schema: &#34;Edit assets in the &lt;VolumeName&gt; volume&#34; and &#34;Create assets in the &lt;VolumeName&gt; volume.&#34; Versions 4.17.9 and 5.9.15 patch the issue.</p> https://cve.radiocsirt.org/vuln/cve-2026-41129