CVE-2026-126663 | Contao up to 5.3.53/5.7.16/6.0.5 Insert Tag isInsecurePath path traversal

A vulnerability categorized as problematic has been discovered in Contao up to 5.3.53/5.7.16/6.0.5. This affects the function Validator::isInsecurePath of the component Insert Tag. Such manipulation leads to path traversal.

This vulnerability is referenced as CVE-2026-126663. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More