CVE-2026-64873

Custom query URLs could access internal or reserved network services...

CVE-2026-64872

Custom purge and log paths could escape the site webroot directory...

CVE-2026-64874

CDN credentials were exposed in administrator request URLs...