A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating system commands as the PHP web worker.
2026年9月11日
CVE-2026-79987 [HIGH] – A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp per
📑 文章目录



