2026-08-25 09:00 by Leo Feyer

Improper access control in the table access voter

Date: 2026-08-25
CVE ID: CVE-2026-107851

Description

A regular backend user might see results for modules they do not have permission to access in the backend search.

Affected versions

Contao 5.7 up to 5.7.11

Suggested solution

Upgrade to Contao 5.7.12.

Workaround

Disable the backend search.

More information