Verified Advisories

Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 1 total.

Severity: All Critical High

Library: pimcore/pimcore

CVE-2026-45704 HIGH CVSS 7.1 Verified Advisory Jul 17, 2026

Authorization bypass in Pimcore's CustomReports bundle (CVE-2026-45704)

CVE-2026-45704 is an authorization bypass vulnerability in Pimcore's CustomReports bundle where inconsistent access control between the report listing endpoint and the report detail endpoint allows a low-privileged au...

Fixed in 11.5.17 (LTS); 12.3.6

Authentication Bypass Docker PHP