CVE-2026-93365 | Bludit CMS up to 3.22.0/4.0.0-beta-1 Content Get List Endpoint content-get-list.php getList draft improper authorization

A vulnerability identified as problematic has been detected in Bludit CMS up to 3.22.0/4.0.0-beta-1. Affected by this vulnerability is the function getList of the file bl-kernel/ajax/content-get-list.php of the component Content Get List Endpoint. This manipulation of the argument draft causes improper authorization.

This vulnerability is tracked as CVE-2026-93365. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to install a patch to address this issue.VulDB Recent EntriesRead More