Question 1

What is CVE-2026-118171 — CVE-2026-118171?

Accepted Answer

The strapi/content-manager package is missing content-scope authorization in the content manager preview URL endpoint. This allows low-privileged admins to generate preview URLs without knowing document identifiers or holding read permissions.

Question 2

What is the authoritative source for CVE-2026-118171?

Accepted Answer

CVE-2026-118171 (CVE-2026-118171) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-118171CVE-2026-118171

Description

Scoring