CVE-2026-104882

Custom backend module "key" actions are dispatched in "Backend::getBackendModule" Backend.php:322-327 after only the module-level "USERCANACCESSMODULE" check - no per-record voter runs. Impact A non-admin editor scoped to certain pages/forms can overwrite the tableitems/listitems/options of...