Authorization Bypass in Sharp Content Management Framework by Code16

CVE-2026-53634

What is CVE-2026-53634?

The Sharp content management framework, developed by Code16, is vulnerable to an authorization bypass due to insufficient checks in the Quick Creation Command feature for versions 9.0.0 through 9.22.3. Authenticated users lacking the necessary create permissions are able to access the creation form and submit new records for any entity configured with a Quick Creation Command handler. This could potentially lead to unauthorized data manipulation within the system. The vulnerability has been addressed in version 9.22.3, where proper authorization checks have been implemented to safeguard against such exploits.

References