CVE-2026-126811

BookStack versions prior to 26.09.3 are susceptible to an incorrect authorization vulnerability. The flaw exists because the application checks for PageView permissions but fails to verify the draft status of page images. This allows authenticated users to access other users' unpublished draft im...