CVE-2026-81916 | Concrete CMS up to 9.5.2 Express Entry Authorization privileges management

A vulnerability, which was classified as problematic, was found in Concrete CMS up to 9.5.2. Impacted is an unknown function of the component Express Entry Authorization. Such manipulation leads to improper privilege management. This vulnerability is uniquely identified as CVE-2026-81916. The attack can be launched remotely. No exploit exists. Weiterlesen