Post
STACKFLAG
stackflag.bsky.social
did:plc:zhe53h7ajlloep2oso5pqxzj
CVE-2026-115935 - cms
A user who can log into the Craft CMS control panel can send specially crafted API headers that change the secret security key stored in the site's .env file. With the new key the attacker…
Too many irrelevant or confusing CVEs? Use stackflag.com
#cms #craftcms #CVE #infosec
https://stackflag.com/vulnerabilities/cve-2026-115935-cms?utm_source=bluesky&utm_medium=social&utm_campaign=cve_poster&utm_content=cve-2026-115935
2026-10-24T11:50:04.680Z