EUVD Vulnerability Catalog

EUVD-2026-124883

Severity: HIGH Base Score: 8.4 CVSS Version: 4.0

Vulnerability Description

Edito CMS deserializes JSON data without further validation. A user (even an administrator) cannot exploit this vulnerability through the application's normal functionality. An attacker who could modify cache entries or inject them could execute code on the server. This issue was fixed in version 5.10.2607. Hotfixes for older versions (5.8) have also been released.

CVSS Vector Analysis

Below is the complete, human-readable breakdown of the CVSS metric string: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

▪ Attack Vector (AV): Local

▪ Attack Complexity (AC): Low

▪ Attack Requirements (AT): None

▪ Privileges Required (PR): High

▪ User Interaction (UI): None

▪ Vulnerability Confidentiality Impact (VC): High

▪ Vulnerability Integrity Impact (VI): High

▪ Vulnerability Availability Impact (VA): High

▪ Subsequent Confidentiality Impact (SC): Low

▪ Subsequent Integrity Impact (SI): Low

▪ Subsequent Availability Impact (SA): Low

Affected Vendors & Systems

Vendor Edito

References & Advisory Links

Metadata Profile

Database Authority

European Union Agency for Cybersecurity (ENISA) EUVD

Assigner

CERT-PL

EPSS Probability

Known Aliases

CVE-2026-59081 GHSA-576w-qcwc-9hgf

Published On

2026-11-13

Last Updated

2026-11-13