CVE-2026-113670 | ApostropheCMS up to 4.32.x Core Page REST API getOne _id/slug privileges management

October 20, 2026 Yanac

A vulnerability has been found in ApostropheCMS up to 4.32.x and classified as problematic. This issue affects the function getOne of the component Core Page REST API. Performing a manipulation of the argument _id/slug results in improper privilege management.

This vulnerability was named CVE-2026-113670. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More