ApostropheCMS vulnerabilities

CVEs whose affected-version data names the ApostropheCMS package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-110904Medium· 5.3PoC

ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.

ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.

▾ Twilightapostrophecms · ApostropheCMSEPSS 0.30%via NVD

ApostropheCMS vulnerabilities (CVEs) · VulnSea