Medium severity6.3NVD Advisory· Published Sep 18, 2026

CVE-2026-93504

Description

A vulnerability has been found in SveltyCMS 0.0.6. This affects an unknown part of the file src/routes/api/[...path]/+server.ts of the component User Attribute Update Endpoint. Such manipulation leads to improper access controls. It is possible to launch the attack remotely. The name of the patch is 05b4f9efeb79e9d72a693232334d7529687f896f. It is advisable to implement a patch to correct this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

SveltyCMS/SveltyCMSllm-create
Range: <0.0.6

Patches

Vulnerability mechanics

References

github.com/SveltyCMS/SveltyCMS/commit/05b4f9efeb79e9d72a693232334d7529687f896fnvd
vuldb.com/cve/CVE-2026-93504nvd
vuldb.com/submit/942849nvd
vuldb.com/vuln/407421nvd
vuldb.com/vuln/407421/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000