CVE-2026-111665Published
Piranha CMS through 12.2 Missing Authorization in Manager Language API
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-111665 · Microsoft / collected KEV context
cve-program · CVE-2026-111665
- https://hackmd.io/@hieuPenguinnn/piranha-cms-manager-language-api-missing-permission
- https://github.com/PiranhaCMS/piranha.core/blob/v12.2/core/Piranha.Manager/Controllers/LanguageApiController.cs#L21-L89
- https://github.com/PiranhaCMS/piranha.core/blob/v12.2/core/Piranha.Manager/Services/LanguageService.cs#L84-L110
- https://www.vulncheck.com/advisories/piranha-cms-through-12.2-missing-authorization-in-manager-language-api
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.