CVE-2026-125398 | CoreBunch Instatic up to 0.0.20 Row Authorization author handleRowAuthor id authorization

November 10, 2026 Yanac

A vulnerability, which was classified as critical, has been found in CoreBunch Instatic up to 0.0.20. The affected element is the function handleRowAuthor of the file /admin/api/cms/data/rows/:id/author of the component Row Authorization. This manipulation of the argument ID causes authorization bypass.

This vulnerability appears as CVE-2026-125398. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More