CVE-2026-55072

Pimcore is an open-source Data & Experience Management Platform. In versions prior to 2026.1.5 , a missing trailing $ anchor in the ClassDefinition UID validation regex (ClassDefinition.php) combined with an unquoted $object->getClassId() concatenation in Block.php allows an authenticated user...