PT-2026-146432

CVE-2026-59075

Published

2026-11-13

Updated

2026-11-13

Description by

CVSS 4.0

7.1

High

MetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Edito CMS is vulnerable to Dynamic LINQ injection. Due to improper input validation, an authenticated attacker can inject conditional expressions into the sort parameter of paginated administrative endpoints. Analyzing the returned result order allows the attacker to extract value of any field character by character, leading to potential exposure of sensitive data.

This issue was fixed in version 5.10.2607. Hotfixes for older versions (5.8) have also been released.

Exploitability

Fix

Researchers

Dawid Małecki

Michał Majchrowicz

Paweł Zdunek

Vendors

Affected products

Weakness enumeration

CWE-917: Improper Neutralization of Special Elements used in an Expression Language Statement (\'Expression Language Injection\')

Related identifiers