CVE-2026-124431 | Craft CMS up to 5.11.1 Volume Browser Modal authorization

A vulnerability was found in Craft CMS up to 5.11.1. It has been declared as problematic. This affects an unknown function of the component Volume Browser Modal. The manipulation results in authorization bypass.

This vulnerability was named CVE-2026-124431. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More