CVE-2026-110904

CVE-2026-110904 — ApostropheCMS before 4.33.0 allows authentication bypass for REST API page readi

📅 2026-10-15

🟡 Medium 🔥 No NVD Vulnerability Vulnerability CVSS 5.3

ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.

Vulnerability

CVE-2026-110904

NVD

Refer to CVE-2026-110904 NVD advisory