← All advisories

Medium severity5.3NVD Advisory· Published Oct 15, 2026

CVE-2026-110904

CVE-2026-110904

Description

ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Apostrophecms/Apostropheinferred2 versions
<4.33.0+ 1 more
- (no CPE)range: <4.33.0
- (no CPE)range: <4.33.0

Patches

Vulnerability mechanics

References

1

github.com/apostrophecms/apostrophe/security/advisories/GHSA-2j32-q6rx-h844nvd

News mentions

0

No linked articles in our index yet.