Question 1

What is CVE-2026-64791 — CVE-2026-64791?

Accepted Answer

Administrator routes and install/update/uninstall processing did not consistently enforce component-management and installation permissions. An unauthorized backend user or CSRF attack could install, update or remove extensions.

Question 2

What is the authoritative source for CVE-2026-64791?

Accepted Answer

CVE-2026-64791 (CVE-2026-64791) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-64791CVE-2026-64791

Description

Scoring