Vulnerabilities in AlchemyCMS

3 results

CVE-2026-57579HIGHAlchemy: Unauthenticated nested page API leaks restricted & unpublished contentEPSS 0.6%CVE-2026-86777MEDIUMAlchemyCMS before 7.4.16 and 8.x before 8.3.6 Missing Authorization on GET /api/nodesEPSS 0.6%CVE-2026-23885MEDIUMAlchemyCMS has Authenticated Remote Code Execution (RCE) via eval injection in ResourcesHelperEPSS 0.5%