CVE-2026-107914Published
Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when delivering a compressed archive. This vulnerability is mitigated by the fact that an export must have been previously requested b…
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-107914 · Microsoft / collected KEV context
cve-program · CVE-2026-107914
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.