CVE-2026-112952 | ApostropheCMS up to 4.33.x slugTaken slug permission

October 20, 2026 Yanac

A vulnerability described as problematic has been identified in ApostropheCMS up to 4.33.x. Affected by this issue is some unknown functionality of the file /api/v1/@apostrophecms/doc/slugTaken. Executing a manipulation of the argument slug can lead to permission issues.

This vulnerability is handled as CVE-2026-112952. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More