VULNERABILITY INTELLIGENCE
CVE-2026-56092
EPSS probability0.29%
CISA KEVNot currently listed
Published2026-08-25
Last modified2026-09-17
Description
The extension forces empty frontend-group and subpage-inheritance restrictions onto page records during indexer sub-requests, and this forged state was persisted into the shared rootline cache, allowing anonymous visitors to bypass extendToSubpages-inherited access restrictions on cached pages.
Weakness classification
- f4fb688c-4412-4426-b4b8-421ecf27b14a: CWE-862