CVE-2026-59074

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-59074", "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", "state": "PUBLISHED", "assignerShortName": "CERT-PL", "dateReserved": "2026-07-02T08:57:58.309Z", "datePublished": "2026-11-13T07:26:21.814Z", "dateUpdated": "2026-11-13T07:26:21.814Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", "shortName": "CERT-PL", "dateUpdated": "2026-11-13T07:26:21.814Z"}, "title": "Improper Cryptographic Signature Verification in Edito CMS", "datePublic": "2026-11-12T09:54:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-347", "description": "CWE-347 Improper verification of cryptographic signature", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-21", "descriptions": [{"lang": "en", "value": "CAPEC-21 Exploitation of Trusted Identifiers"}]}], "affected": [{"vendor": "Edito", "product": "Edito CMS", "versions": [{"status": "affected", "version": "0", "lessThan": "5.10.2607", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Edito CMS is vulnerable to improper cryptographic signature verification in the JWT refresh logic. An authenticated low-privilege user can submit self-crafted\u200b \u200bJWT\u200b containing\u200b \u200ban existing user\u200b \u200bidentifier and, due to the lack of signature validation,\u200b\u200b\u00a0 obtain\u200b \u200ba \u200b\u200bvalid,\u200b\u200b fully-signed\u200b\u200b session \u200b\u200btoken\u200b\u200b for\u200b\u200b any \u200b\u200baccount \u200b\u200bin\u200b \u200bthe\u200b \u200bsystem. This allows the attacker to\u00a0impersonate any user, including administrators.\nThis issue was fixed in version 5.10.2607.\u00a0 Hotfixes for older versions (5.8)\u00a0have also been released.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Edito CMS is vulnerable to improper cryptographic signature verification in the JWT refresh logic. An authenticated low-privilege user can submit self-crafted\u200b \u200bJWT\u200b containing\u200b \u200ban existing user\u200b \u200bidentifier and, due to the lack of signature validation,\u200b\u200b&nbsp; obtain\u200b \u200ba \u200b\u200bvalid,\u200b\u200b fully-signed\u200b\u200b session \u200b\u200btoken\u200b\u200b for\u200b\u200b any \u200b\u200baccount \u200b\u200bin\u200b \u200bthe\u200b \u200bsystem. This allows the attacker to&nbsp;impersonate any user, including administrators.<div><br><div>This issue was fixed in version 5.10.2607.&nbsp; Hotfixes for older versions (5.8)&nbsp;have also been released.</div></div>"}]}], "references": [{"url": "https://cert.pl/posts/2026/11/CVE-2026-59074", "tags": ["third-party-advisory"]}, {"url": "https://www.edito.pl/", "tags": ["product"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "HIGH", "baseScore": 8.7, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}], "credits": [{"lang": "en", "value": "Micha\u0142 Majchrowicz (AFINE Team)", "type": "finder"}, {"lang": "en", "value": "Dawid Ma\u0142ecki (AFINE Team)", "type": "finder"}, {"lang": "en", "value": "\u200bPawe\u0142 Zdunek (AFINE Team)", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.3"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Edito CMS", "vendor": "Edito", "versions": [{"lessThan": "5.10.2607", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "cvd@cert.pl"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Edito CMS is vulnerable to improper cryptographic signature verification in the JWT refresh logic. An authenticated low-privilege user can submit self-crafted\u200b \u200bJWT\u200b containing\u200b \u200ban existing user\u200b \u200bidentifier and, due to the lack of signature validation,\u200b\u200b\u00a0 obtain\u200b \u200ba \u200b\u200bvalid,\u200b\u200b fully-signed\u200b\u200b session \u200b\u200btoken\u200b\u200b for\u200b\u200b any \u200b\u200baccount \u200b\u200bin\u200b \u200bthe\u200b \u200bsystem. This allows the attacker to\u00a0impersonate any user, including administrators.\nThis issue was fixed in version 5.10.2607.\u00a0 Hotfixes for older versions (5.8)\u00a0have also been released."}], "id": "CVE-2026-59074", "lastModified": "2026-11-13T08:17:17.347", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cvd@cert.pl", "type": "Secondary"}]}, "published": "2026-11-13T08:17:17.347", "references": [{"source": "cvd@cert.pl", "url": "https://cert.pl/posts/2026/11/CVE-2026-59074"}, {"source": "cvd@cert.pl", "url": "https://www.edito.pl/"}], "sourceIdentifier": "cvd@cert.pl", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-347"}], "source": "cvd@cert.pl", "type": "Primary"}]}

{}

{}