CVE-2026-50283

Craft CMS is a content management system CMS. Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId...

CVE-2026-50283

Craft CMS versions 5.0.0-RC1–5.9.20 and 4.0.0-RC1–4.17.13 contain an authorization issue in AssetsController::actionReplaceFile that can delete a source asset without source delete permission when both assetId and sourceAssetId are supplied. The runtime loads assetId ($assetToReplace) and sourceA...

CVE-2026-50283 Craft CMS: Unauthorized Deletion of Source Assets During File Replacement

Craft CMS is a content management system CMS. Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId...

CVE-2026-50283 Craft CMS: Unauthorized Deletion of Source Assets During File Replacement

Craft CMS is a content management system CMS. Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId...

CVE-2026-53332

creationtimestamp| type| source ---|---|--- 2026-07-01 22:15:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmk4w4t5g26 2026-07-05 03:21:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpummuwclz2c 2026-08-06 04:46:08+00:00| seen|...

CVE-2026-53331

creationtimestamp| type| source ---|---|--- 2026-07-01 22:14:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmk46kqmu2u 2026-07-06 06:53:01+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...

CVE-2026-53328

creationtimestamp| type| source ---|---|--- 2026-07-01 22:14:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmk3gvot52y...

CVE-2026-53326

creationtimestamp| type| source ---|---|--- 2026-07-01 22:13:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmk2syts626 2026-07-05 03:17:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpumgpovsp27...

CVE-2026-53333

creationtimestamp| type| source ---|---|--- 2026-07-01 22:13:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmk235yhm2t...

CVE-2026-53329

creationtimestamp| type| source ---|---|--- 2026-07-01 22:13:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmjzhg7sm2d 2026-07-05 03:20:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpummeghfw2f 2026-07-06 06:52:59+00:00| seen|...

CVE-2026-34110

creationtimestamp| type| source ---|---|--- 2026-07-01 22:04:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmjkgcxie2s 2026-07-02 09:50:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnqxxufbm2u...

CVE-2026-56328

creationtimestamp| type| source ---|---|--- 2026-07-01 21:56:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmj35kge526...

CVE-2026-12110

creationtimestamp| type| source ---|---|--- 2026-07-01 21:55:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmj2jl25u2t 2026-07-04 12:15:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpszyygvko2j...

CVE-2026-56327

creationtimestamp| type| source ---|---|--- 2026-07-01 21:54:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmiykcjnc2o...

CVE-2026-34116

creationtimestamp| type| source ---|---|--- 2026-07-01 21:54:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmiyixr5m2l 2026-07-02 04:39:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn7mv4yi52k 2026-07-02 08:42:05+00:00| seen|...

CVE-2026-56318

creationtimestamp| type| source ---|---|--- 2026-07-01 21:53:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmix2xpz22o...

CVE-2026-14120

creationtimestamp| type| source ---|---|--- 2026-07-01 21:52:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmiutegb32d 2026-07-02 01:47:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmvyggi2d2y 2026-07-02 08:18:29+00:00| seen|...

CVE-2026-14114

creationtimestamp| type| source ---|---|--- 2026-07-01 21:51:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmitplxfe2y 2026-07-02 01:39:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmvk3ipal2q 2026-07-02 08:17:28+00:00| seen|...

CVE-2026-14105

creationtimestamp| type| source ---|---|--- 2026-07-01 21:51:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmisxzocu2t 2026-07-02 08:15:37+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:46:22+00:00| seen|...

CVE-2026-14117

creationtimestamp| type| source ---|---|--- 2026-07-01 21:51:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmisht6ni2b 2026-07-02 08:17:58+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:46:54+00:00| seen|...