Security Advisory

CVE-2026-31266

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-27 00:00:00
Last updated 2026-05-27 18:26:58
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint (/actions/app/migrate).

← Browse all CVEs View on cve.org ↗