medium5.3
CVE-2026-112068
The backend module does not check whether a backend user has access to the requested site.
Impact
The backend module does not check whether a backend user has access to the requested site. Users with access to the module can therefore open the analytics dashboard of any site.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.