CVE-2026-105859

Summary

The flaw allows an attacker to modify collection documents in a headless content management system without proper access control, leading to unauthorized data changes.

Exploitability

Exploitation is relatively straightforward if an attacker can submit a request to the specific update endpoint, requiring access to the system and knowledge of the endpoint.

Blast radius

If exploited, this could lead to significant data breaches and unauthorized modifications, impacting the integrity and confidentiality of the system's content.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 3.90.0 or 4.0.0-canary.34 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.