Deserialization Vulnerability in Edito CMS by Edito

CVE-2026-59081

What is CVE-2026-59081?

Edito CMS contains a vulnerability that allows for unsafe deserialization of JSON data, potentially enabling attackers to manipulate cache entries. Although the vulnerability cannot be exploited through the application's conventional operations, attackers who have access to modify cache entries could execute arbitrary code on the server. This serious security concern impacts older versions of the CMS and necessitates timely updates to version 5.10.2607 or application of available hotfixes for affected older versions.

References