CVE-2026-27593 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 6.3.3 and 5.73.10, an attacker may leverage a vulnerability in the pas…
Critical CVSS: 9.3

CVE-2026-27593

Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 6.3.3 and 5.73.10, an attacker may leverage a vulnerability in the password reset feature to capture a user's token and reset the password on their behalf. The attacker must know the email address of a valid account on the site, and the actual user must blindly click the link in their email even though they didn't request the reset. This has been fixed in 6.3.3 and 5.73.10.
Vendor
Statamic
Product
Statamic
CWE
CWE-640
Yayın Tarihi
2026-02-24 22:16:32
Güncelleme
2026-02-25 20:27:52
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-640 Statamic CRITICAL Statamic 2026

Referanslar

https://github.com/statamic/cms/commit/6fdd03324982848e8754f2edd2265262d361714e https://github.com/statamic/cms/commit/78e63dfcf705b116d5ac0f7f7f5a1a69be63d1be https://github.com/statamic/cms/commit/b2be592ddfb588bcb88c9be454f3590e14b145b0 https://github.com/statamic/cms/releases/tag/v5.73.10 https://github.com/statamic/cms/releases/tag/v6.3.3 https://github.com/statamic/cms/security/advisories/GHSA-jxq9-79vj-rgvw