{"schema":"vulnpedia.research/1","cve":"CVE-2026-107851","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/contao/contao/security/advisories/GHSA-5974-gfqc-wrcm","tags":["x_refsource_CONFIRM","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:26:31.329Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:26:31.329Z","url":"https://github.com/contao/contao/security/advisories/GHSA-5974-gfqc-wrcm"},{"source":"nvd","sourceId":"CVE-2026-107851","modified":"2026-10-16T20:04:29.760","url":"https://github.com/contao/contao/security/advisories/GHSA-5974-gfqc-wrcm"},{"source":"ghsa","sourceId":"GHSA-5974-gfqc-wrcm","url":"https://github.com/contao/contao/security/advisories/GHSA-5974-gfqc-wrcm"},{"source":"ghsa","sourceId":"GHSA-5974-gfqc-wrcm","modified":"2026-10-09T21:00:08.462529572Z","url":"https://github.com/contao/contao/security/advisories/GHSA-5974-gfqc-wrcm"}]},{"url":"https://github.com/contao/contao/commit/9d6f582a4cc6a758ce11d1043fc9c0ba62c5f4c9","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:26:31.329Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:26:31.329Z","url":"https://github.com/contao/contao/commit/9d6f582a4cc6a758ce11d1043fc9c0ba62c5f4c9"},{"source":"nvd","sourceId":"CVE-2026-107851","modified":"2026-10-16T20:04:29.760","url":"https://github.com/contao/contao/commit/9d6f582a4cc6a758ce11d1043fc9c0ba62c5f4c9"},{"source":"ghsa","sourceId":"GHSA-5974-gfqc-wrcm","url":"https://github.com/contao/contao/commit/9d6f582a4cc6a758ce11d1043fc9c0ba62c5f4c9"},{"source":"ghsa","sourceId":"GHSA-5974-gfqc-wrcm","modified":"2026-10-09T21:00:08.462529572Z","url":"https://github.com/contao/contao/commit/9d6f582a4cc6a758ce11d1043fc9c0ba62c5f4c9"}]},{"url":"https://github.com/contao/contao/releases/tag/5.7.12","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:26:31.329Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:26:31.329Z","url":"https://github.com/contao/contao/releases/tag/5.7.12"},{"source":"nvd","sourceId":"CVE-2026-107851","modified":"2026-10-16T20:04:29.760","url":"https://github.com/contao/contao/releases/tag/5.7.12"},{"source":"ghsa","sourceId":"GHSA-5974-gfqc-wrcm","url":"https://github.com/contao/contao/releases/tag/5.7.12"},{"source":"ghsa","sourceId":"GHSA-5974-gfqc-wrcm","modified":"2026-10-09T21:00:08.462529572Z","url":"https://github.com/contao/contao/releases/tag/5.7.12"}]},{"url":"https://osv.dev/vulnerability/GHSA-5974-gfqc-wrcm","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-5974-gfqc-wrcm","modified":"2026-10-09T21:00:08.462529572Z","origins":[{"source":"ghsa","sourceId":"GHSA-5974-gfqc-wrcm","url":"https://osv.dev/vulnerability/GHSA-5974-gfqc-wrcm"},{"source":"ghsa","sourceId":"GHSA-5974-gfqc-wrcm","modified":"2026-10-09T21:00:08.462529572Z","url":"https://osv.dev/vulnerability/GHSA-5974-gfqc-wrcm"}]},{"url":"https://github.com/contao/contao","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-5974-gfqc-wrcm","modified":"2026-10-09T21:00:08.462529572Z","origins":[{"source":"ghsa","sourceId":"GHSA-5974-gfqc-wrcm","url":"https://github.com/contao/contao"},{"source":"ghsa","sourceId":"GHSA-5974-gfqc-wrcm","modified":"2026-10-09T21:00:08.462529572Z","url":"https://github.com/contao/contao"}]},{"source":"euvd","sourceId":"EUVD-2026-95981","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95981","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-95981","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95981"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-5974-gfqc-wrcm","url":"https://osv.dev/vulnerability/GHSA-5974-gfqc-wrcm","ecosystem":"Packagist","name":"contao/core-bundle","purl":"pkg:composer/contao/core-bundle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.0"},{"fixed":"5.7.12"}]}],"versions":["5.7.0","5.7.1","5.7.10","5.7.11","5.7.2","5.7.3","5.7.4","5.7.5","5.7.6","5.7.7","5.7.8","5.7.9"],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-5974-gfqc-wrcm/GHSA-5974-gfqc-wrcm.json"},"modified":"2026-10-09T21:00:08.462529572Z","origins":[{"source":"ghsa","sourceId":"GHSA-5974-gfqc-wrcm","modified":"2026-10-09T21:00:08.462529572Z","url":"https://osv.dev/vulnerability/GHSA-5974-gfqc-wrcm"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}