Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, an improper authorization issue in the page content retrieval feature may allow retrieval of non-public information. Versions 1.41.1 and 2.41.1 contain a patch.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-32299 Connect-CMS Unauthorized Information Disclosure in Versions 1.x and 2.x https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-32299
Post summary
The entry simply lists CVE-2026-32299 as an unauthorized information disclosure issue affecting Connect‑CMS 1.x and 2.x, with no further details or actionable information provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | opensource-workshop | connect-cms | - | - | - |