CVE-2026-65476

Civi versions up to 2.2.4 are susceptible to unauthenticated broken access control vulnerabilities, which could allow unauthorized users to access sensitive data or perform actions typically restricted to authenticated users. Organizations utilizing affected versions should prioritize remediation to mitigate potential data exposure and unauthorized system manipulation.