Back to database

CVE-2026-31266

HIGH · CVSS 7.3 EPSS 0.28% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-05-27 · Last synced: 2026-06-25

CyberRota Analysis

Detaylı analiz gerekiyor.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE

CVE-2026-31266

Severity

HIGH

CVSS

7.3

EPSS

0.28%

Original NVD Description

Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint (/actions/app/migrate).