CVE-2026-84794 | Craft CMS up to 5.10.10 Move Asset force incorrect user management

September 2, 2026 Yanac

A vulnerability has been found in Craft CMS up to 5.10.10 and classified as problematic. This affects an unknown function of the component Move Asset. This manipulation of the argument force causes incorrect user management.

This vulnerability is registered as CVE-2026-84794. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More