VULNERABILITY INTELLIGENCE

CVE-2026-45260

CVSS score8.1 HIGH

EPSS probability0.44%

CISA KEVNot currently listed

Published2026-07-17

Last modified2026-07-23

Description

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.7, Pimcore's WebDAV asset endpoint exposes a MOVE operation through /asset/webdav{path} without an authentication plugin in bundles/CoreBundle/src/Controller/WebDavController.php, and models/Asset/WebDAV…