CVE-2026-32268 | CraftCMS azure-blob up to 2.1.0 actionLoadContainerData authorization (GHSA-q6fm-p73f-x862)

March 18, 2026 Yanac

A vulnerability described as problematic has been identified in CraftCMS azure-blob up to 2.1.0. This affects the function actionLoadContainerData. Executing a manipulation can lead to missing authorization.

This vulnerability is handled as CVE-2026-32268. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More