CVE-2026-92591 | Craft CMS up to 5.10.12 Installer Site::getName information disclosure

September 16, 2026 Yanac

A vulnerability classified as problematic was found in Craft CMS up to 5.10.12. Affected by this vulnerability is the function Site::getName of the component Installer. Executing a manipulation can lead to information disclosure.

This vulnerability is tracked as CVE-2026-92591. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More