CVE-2026-68527 | Concrete CMS up to 9.5.2 Calendar Event Edit Dialog edit.php authorization

A vulnerability labeled as problematic has been found in Concrete CMS up to 9.5.2. The affected element is an unknown function of the file concrete/controllers/dialog/event/edit.php of the component Calendar Event Edit Dialog. Such manipulation leads to authorization bypass.

This vulnerability is listed as CVE-2026-68527. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More