CVE-2026-49288 | Statamic CMS up to 5.73.22/6.19.x Custom Fields information disclosure (GHSA-2497-6pwj-pwg7)

June 19, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Statamic CMS up to 5.73.22/6.19.x. The impacted element is an unknown function of the component Custom Fields Handler. Executing a manipulation can lead to information disclosure.

This vulnerability appears as CVE-2026-49288. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More