CVE WATCH / VULNERABILITY DETAIL
CVE-2026-113653
UNKNOWNCVSS 0NVD feed
Published 20 October 2026 · tracked since 21 October 2026
Description
ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, viewRole is not applied to anonymous visitors when a developer exposes user objects through a publicly rendered relationship or expressly enabled public API. Inadequately limited templates, including serialization of
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-113719 MEDIUM 4.5
- CVE-2026-113716 MEDIUM 4.5
- CVE-2026-113708 CRITICAL 9.9
- CVE-2026-113709 CRITICAL 9.9
- CVE-2026-113643 MEDIUM 4.3
- CVE-2026-113710 MEDIUM 5.9
- CVE-2026-113711 HIGH 7.5
- CVE-2026-113666 HIGH 7.1
- CVE-2026-113668 MEDIUM 5.3
- CVE-2026-113670 MEDIUM 5.3