Is CVE-2026-110904 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-110904?

CVE-2026-110904 has a CVSS v3 severity of MEDIUM (5.3).

Back

Description

ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.