Unrated severityNVD Advisory· Published Jun 29, 2026· Updated Jun 29, 2026

CVE-2026-31016

Description

Cross Site Request Forgery vulnerability in Squidex.io Squidex CMS v.7.21.0 and before allows a remote attacker to escalate privileges via the IdentityServer account profile endpoint

Affected products

Squidex.io/Squidexllm-fuzzy
Range: <=7.21.0
Squidex/Squidexllm-fuzzy
Range: <=7.21.0

Patches

Vulnerability mechanics

References

lgnas.gitbook.io/findings/cve-2026-31016mitre
lgnas.gitbook.io/hello/silly-findings/squidex-cms-csrfmitre
www.youtube.com/watchmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000