CVE-2026-27593

{"id": "CVE-2026-27593", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-27593", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-27T20:55:56.535981Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.3, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.8, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "statamic", "product": "cms", "versions": [{"status": "affected", "version": "< 5.73.10"}, {"status": "affected", "version": ">= 6.0.0-alpha.1, < 6.3.3"}]}]}], "published": "2026-02-24T22:16:32.867", "references": [{"url": "https://github.com/statamic/cms/commit/6fdd03324982848e8754f2edd2265262d361714e", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/statamic/cms/commit/78e63dfcf705b116d5ac0f7f7f5a1a69be63d1be", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/statamic/cms/commit/b2be592ddfb588bcb88c9be454f3590e14b145b0", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/statamic/cms/releases/tag/v5.73.10", "tags": ["Release Notes"], "source": "security-advisories@github.com"}, {"url": "https://github.com/statamic/cms/releases/tag/v6.3.3", "tags": ["Release Notes"], "source": "security-advisories@github.com"}, {"url": "https://github.com/statamic/cms/security/advisories/GHSA-jxq9-79vj-rgvw", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-640"}]}], "descriptions": [{"lang": "en", "value": "Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 6.3.3 and 5.73.10, an attacker may leverage a vulnerability in the password reset feature to capture a user's token and reset the password on their behalf. The attacker must know the email address of a valid account on the site, and the actual user must blindly click the link in their email even though they didn't request the reset. This has been fixed in 6.3.3 and 5.73.10."}, {"lang": "es", "value": "Statmatic es un sistema de gesti\u00f3n de contenido (CMS) impulsado por Laravel y Git. Antes de las versiones 6.3.3 y 5.73.10, un atacante podr\u00eda aprovechar una vulnerabilidad en la funci\u00f3n de restablecimiento de contrase\u00f1a para capturar el token de un usuario y restablecer la contrase\u00f1a en su nombre. El atacante debe conocer la direcci\u00f3n de correo electr\u00f3nico de una cuenta v\u00e1lida en el sitio, y el usuario real debe hacer clic ciegamente en el enlace de su correo electr\u00f3nico aunque no haya solicitado el restablecimiento. Esto ha sido corregido en 6.3.3 y 5.73.10."}], "lastModified": "2026-06-17T10:27:21.573", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:statamic:statamic:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09579639-615E-4F31-83CF-9A57F55D4B93", "versionEndExcluding": "5.73.10"}, {"criteria": "cpe:2.3:a:statamic:statamic:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53E898A8-A303-4E91-B98A-5BC6C37F6AD1", "versionEndExcluding": "6.3.3", "versionStartIncluding": "6.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}