CVE-2026-45260

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 LTS and 12.3.7, Pimcore's WebDAV asset endpoint exposes a MOVE operation through /asset/webdavpath without an authentication plugin in bundles/CoreBundle/src/Controller/WebDavController.php, and...

CVE-2026-45260

creationtimestamp| type| source ---|---|--- 2026-05-26 14:00:10+00:00| published-proof-of-concept| https://github.com/pimcore/pimcore/security/advisories/GHSA-wc7j-g8wx-m2qx 2026-07-17 22:12:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqurgm2p562q 2026-07-18 17:01:14+00:00|...