7.5 HighCWE-284
CVE-2026-32299
Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval Feature
opensource-workshopconnect-cms
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 25 Oct
0.3%probability of exploitation in the next 30 days
Higher than 20% of scored CVEs
SeverityCVSS
7.5High
Description NVD
Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, an improper authorization issue in the page content retrieval feature may allow retrieval of non-public information. Versions 1.41.1 and 2.41.1 contain a patch.
Coverage No articles yet
No CyberSIXT article names CVE-2026-32299 yet. New articles appear here and in the RSS feed.