CVE-2026-110904

CVE-2026-110904 published: ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.

View full NVD advisory → ← Back to CVE watch