{"schema":"vulnpedia.research/1","cve":"CVE-2026-107850","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/contao/contao/security/advisories/GHSA-q6wp-fr43-gm9v","tags":["x_refsource_CONFIRM","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:25:02.286Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:25:02.286Z","url":"https://github.com/contao/contao/security/advisories/GHSA-q6wp-fr43-gm9v"},{"source":"nvd","sourceId":"CVE-2026-107850","modified":"2026-10-16T17:17:04.113","url":"https://github.com/contao/contao/security/advisories/GHSA-q6wp-fr43-gm9v"},{"source":"ghsa","sourceId":"GHSA-q6wp-fr43-gm9v","url":"https://github.com/contao/contao/security/advisories/GHSA-q6wp-fr43-gm9v"},{"source":"ghsa","sourceId":"GHSA-q6wp-fr43-gm9v","modified":"2026-10-09T21:00:14.820578239Z","url":"https://github.com/contao/contao/security/advisories/GHSA-q6wp-fr43-gm9v"}]},{"url":"https://github.com/contao/contao/commit/6b483d380a4b2dc61432c4c697e411508f93bf91","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:25:02.286Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:25:02.286Z","url":"https://github.com/contao/contao/commit/6b483d380a4b2dc61432c4c697e411508f93bf91"},{"source":"nvd","sourceId":"CVE-2026-107850","modified":"2026-10-16T17:17:04.113","url":"https://github.com/contao/contao/commit/6b483d380a4b2dc61432c4c697e411508f93bf91"},{"source":"ghsa","sourceId":"GHSA-q6wp-fr43-gm9v","url":"https://github.com/contao/contao/commit/6b483d380a4b2dc61432c4c697e411508f93bf91"},{"source":"ghsa","sourceId":"GHSA-q6wp-fr43-gm9v","modified":"2026-10-09T21:00:14.820578239Z","url":"https://github.com/contao/contao/commit/6b483d380a4b2dc61432c4c697e411508f93bf91"}]},{"url":"https://github.com/contao/contao/releases/tag/5.7.12","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:25:02.286Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:25:02.286Z","url":"https://github.com/contao/contao/releases/tag/5.7.12"},{"source":"nvd","sourceId":"CVE-2026-107850","modified":"2026-10-16T17:17:04.113","url":"https://github.com/contao/contao/releases/tag/5.7.12"},{"source":"ghsa","sourceId":"GHSA-q6wp-fr43-gm9v","url":"https://github.com/contao/contao/releases/tag/5.7.12"},{"source":"ghsa","sourceId":"GHSA-q6wp-fr43-gm9v","modified":"2026-10-09T21:00:14.820578239Z","url":"https://github.com/contao/contao/releases/tag/5.7.12"}]},{"url":"https://osv.dev/vulnerability/GHSA-q6wp-fr43-gm9v","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-q6wp-fr43-gm9v","modified":"2026-10-09T21:00:14.820578239Z","origins":[{"source":"ghsa","sourceId":"GHSA-q6wp-fr43-gm9v","url":"https://osv.dev/vulnerability/GHSA-q6wp-fr43-gm9v"},{"source":"ghsa","sourceId":"GHSA-q6wp-fr43-gm9v","modified":"2026-10-09T21:00:14.820578239Z","url":"https://osv.dev/vulnerability/GHSA-q6wp-fr43-gm9v"}]},{"url":"https://github.com/contao/contao","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-q6wp-fr43-gm9v","modified":"2026-10-09T21:00:14.820578239Z","origins":[{"source":"ghsa","sourceId":"GHSA-q6wp-fr43-gm9v","url":"https://github.com/contao/contao"},{"source":"ghsa","sourceId":"GHSA-q6wp-fr43-gm9v","modified":"2026-10-09T21:00:14.820578239Z","url":"https://github.com/contao/contao"}]},{"source":"euvd","sourceId":"EUVD-2026-95980","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95980","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-95980","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95980"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-q6wp-fr43-gm9v","url":"https://osv.dev/vulnerability/GHSA-q6wp-fr43-gm9v","ecosystem":"Packagist","name":"contao/core-bundle","purl":"pkg:composer/contao/core-bundle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.1"},{"fixed":"5.7.12"}]}],"versions":["5.7.1","5.7.10","5.7.11","5.7.2","5.7.3","5.7.4","5.7.5","5.7.6","5.7.7","5.7.8","5.7.9"],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-q6wp-fr43-gm9v/GHSA-q6wp-fr43-gm9v.json"},"modified":"2026-10-09T21:00:14.820578239Z","origins":[{"source":"ghsa","sourceId":"GHSA-q6wp-fr43-gm9v","modified":"2026-10-09T21:00:14.820578239Z","url":"https://osv.dev/vulnerability/GHSA-q6wp-fr43-gm9v"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}