CVE-2026-64796

CVE-2026-64796 pertains to the Joomla extension Sourcerer from Regular Labs. The description cites multiple permission-enforcement issues: article creator/last modifier access controls not requiring Super Users, and inconsistent enforcement of CSS, JavaScript, and PHP permissions across tags, att...

CVE-2026-35183

Brave CMS is an open-source CMS. Prior to 2.0.6, an Insecure Direct Object Reference IDOR vulnerability exists in the article image deletion feature. It is located in app/Http/Controllers/Dashboard/ArticleController.php within the deleteImage method. The endpoint accepts a filename from the URL b...