piranha_cms vulnerabilities

CVEs whose affected-version data names the piranha_cms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111665Medium· 5.4

yesterday

Piranha CMS through 12.2 Missing Authorization in Manager Language API

Piranha CMS through 12.2 contains a missing authorization vulnerability in the Piranha.Manager LanguageApiController that allows any authenticated manager user to list, create, edit and delete site languages without the granular Language…

▾ SunlitPiranhaCMS · Piranha CMSvia CVEORG