PiranhaCMS CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM PiranhaCMS CVE published 2026-10-16

CVE-2026-111665

Piranha CMS through 12.2 contains a missing authorization vulnerability in the Piranha.Manager LanguageApiController. This allows any authenticated manager user to list, create, edit, and delete site languages without the required granular permissions. The vulnerability impacts site content and structure, allowing attackers to manipulate localized content instance-wide. System administrators and security [truncated]