Skip to content
Threat Feed
Subscribe

Tag

Authorship-Spoofing

1 brief RSS
high advisory

Craft CMS Authorship Spoofing via Authorization Bypass (CVE-2026-50279)

A low-privileged authenticated user can exploit CVE-2026-50279, an authorization bypass vulnerability in Craft CMS's `entries/save-entry` endpoint, to reassign an entry's authorship to another user without proper permissions, leading to corrupted audit trails and misleading content ownership.

Craft CMS authorship-spoofing authorization-bypass web-application craft-cms cve
2t 1c