PT-2026-64913
CVE-2026-65878
·
Published
2026-07-27
·
Updated
2026-07-27
Description by
CVSS 4.0
8.3
HighMetricsAV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
SP Page Builder versions prior to 6.7.1
Description
Improper path validation and Access Control List (ACL) checks in the media manager allow an authenticated user to perform arbitrary file deletion.
Recommendations
Update SP Page Builder to version 6.7.1 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾