CVE-2026-109304Updated Oct 13, 2026 · PUBLISHEDDescriptionNo description imported yet.Full record on cve.org →Affected packagesPackageVendor / ProductVersion rangeStatuscmscraftcms / cms>= 4.0.0, < 4.18.7affectedcmscraftcms / cms4.18.7unaffectedcmscraftcms / cms>= 5.0.0, < 5.10.14affectedcmscraftcms / cms5.10.14unaffected