{"schema":"vulnpedia.research/1","cve":"CVE-2026-108114","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://hackmd.io/@haind/strapi-admin-token-field-ceiling","tags":["technical-description","exploit"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-10T14:15:50.908Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-10T14:15:50.908Z","url":"https://hackmd.io/@haind/strapi-admin-token-field-ceiling"},{"source":"nvd","sourceId":"CVE-2026-108114","modified":"2026-10-16T19:15:07.947","url":"https://hackmd.io/@haind/strapi-admin-token-field-ceiling"}]},{"url":"https://github.com/strapi/strapi","tags":["product"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-10T14:15:50.908Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-10T14:15:50.908Z","url":"https://github.com/strapi/strapi"},{"source":"nvd","sourceId":"CVE-2026-108114","modified":"2026-10-16T19:15:07.947","url":"https://github.com/strapi/strapi"}]},{"url":"https://github.com/strapi/strapi/blob/v5.57.0/packages/core/admin/server/src/services/api-token.ts#L488-L498","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-10T14:15:50.908Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-10T14:15:50.908Z","url":"https://github.com/strapi/strapi/blob/v5.57.0/packages/core/admin/server/src/services/api-token.ts#L488-L498"},{"source":"nvd","sourceId":"CVE-2026-108114","modified":"2026-10-16T19:15:07.947","url":"https://github.com/strapi/strapi/blob/v5.57.0/packages/core/admin/server/src/services/api-token.ts#L488-L498"}]},{"url":"https://www.vulncheck.com/advisories/strapi-5.47.0-through-5.57.0-improper-authorization-via-admin-api-token-field-permissions","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-10T14:15:50.908Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-10T14:15:50.908Z","url":"https://www.vulncheck.com/advisories/strapi-5.47.0-through-5.57.0-improper-authorization-via-admin-api-token-field-permissions"},{"source":"nvd","sourceId":"CVE-2026-108114","modified":"2026-10-16T19:15:07.947","url":"https://www.vulncheck.com/advisories/strapi-5.47.0-through-5.57.0-improper-authorization-via-admin-api-token-field-permissions"}]},{"source":"euvd","sourceId":"EUVD-2026-96338","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96338","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-96338","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96338"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}