Question 1

What is CVE-2026-118170 — CVE-2026-118170?

Accepted Answer

The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the caller possesses update rights for the underlying document.

Question 2

What is the authoritative source for CVE-2026-118170?

Accepted Answer

CVE-2026-118170 (CVE-2026-118170) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-118170CVE-2026-118170

Description

Scoring