← All credits
Tristan Madani
54 vulnerability records and advisories credit this contributor.
CVE-2026-7881
Concrete CMS 9.5.0 and below is vulnerable to IDOR in the Express Entry Detail block
CVE-2026-8238
Concrete CMS 9.5.0 and below is vulnerable to IDOR in '/ccm/frontend/conversations/message_page' allowing unauthenticated read of any conversation message
CVE-2026-8239
Concrete CMS 9.5.0 and below is vulnerable to IDOR in '/ccm/frontend/conversations/get_rating'
CVE-2026-8968
Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component