EUVD-2026-95973

Contao is an Open Source CMS. From version 4.1.0 until 5.3.50 and 5.7.12, ModuleRegistration::compile enters its follow-up registration branch on any POST to a page containing the registration module without verifying FORMSUBMIT or the preceding captcha result. resendActivationMail can then invok...

CVE-2026-107843: Observable Response Discrepancy

Contao is an Open Source CMS. From version 4.1.0 until 5.3.50 and 5.7.12, ModuleRegistration::compile enters its follow-up registration branch on any POST to a page containing the registration module without verifying FORMSUBMIT or the preceding captcha result. resendActivationMail can then invok...

PT-2026-109302

Name of the Vulnerable Software and Affected Versions Contao versions 4.1.0 through 5.3.49 Contao versions 5.7.0 through 5.7.11 Description An issue exists where the ModuleRegistration::compile function enters its follow-up registration branch on any POST request to a page containing the...