CVEs published by Hackrate

CVEs published by Hackrate (CVE Numbering Authority). 3 tracked.

CVE-2026-115938 HIGH 8.8 Craft CMS allows any authenticated control panel user to submit an element-search condition whose element sele
CVE-2026-115937 HIGH 7.5 The Mollie webhook endpoint accepts two independent, attacker-controlled parameters and never verifies that th
CVE-2026-115935 HIGH 8.8 The app/process-api-response-headers action accepts fake Craft API response headers from any authenticated con