CVE-2026-128335 | Contao up to 5.3.53/5.7.16/6.0.5 Session Data ContaoUser::isEqualTo improper authentication

November 13, 2026 Yanac

A vulnerability classified as problematic was found in Contao up to 5.3.53/5.7.16/6.0.5. Affected is the function ContaoUser::isEqualTo of the component Session Data. Executing a manipulation can lead to improper authentication.

This vulnerability is handled as CVE-2026-128335. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More