CVE-2026-54244 | Statamic up to 5.73.x/6.20.2 Live Preview Endpoint PreviewController.php Field improper authorization

July 17, 2026 Yanac

A vulnerability classified as problematic was found in Statamic up to 5.73.x/6.20.2. This impacts an unknown function of the file src/Http/Controllers/CP/PreviewController.php of the component Live Preview Endpoint. Executing a manipulation of the argument Field can lead to improper authorization.

This vulnerability is registered as CVE-2026-54244. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More