CVE-2026-110907
Last modified
CVE-2026-110907 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a small placeholder string (like [node:title] or [user:name]) used to automatically insert dynamic data into text.
Description
Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a small placeholder string (like [node:title] or [user:name]) used to automatically insert dynamic data into text. A browser is provided for selecting tokens by type. The product doesn't sufficiently limit access to the types of tokens that are available in the token browser. The names of the individual tokens are adequately protected.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| BackdropCMS | Backdrop | >= 1.35.0, < 1.35.2; >= 1.34.0, < 1.34.6 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-110907?
How severe is CVE-2026-110907?
How do I fix CVE-2026-110907?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-11089Uninitialized Use in Media in Google Chrome prior to 149.0.7…6.5
- CVE-2026-110890Improper Neutralization of Input During Web Page Generation …6.5
- CVE-2026-110891Missing Authorization vulnerability in WordLift Srl WordLift…5.4
- CVE-2026-1109A vulnerability was detected in cijliu librtsp up to 2ec1a81…7.8
- CVE-2026-11090Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7…6.5
- CVE-2026-110904ApostropheCMS before 4.33.0 allows authentication bypass for…5.3
- CVE-2026-110908Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and so…8.8
- CVE-2026-110909Wheels CLI through 4.1.0 does not verify that the local deve…5
- CVE-2026-11091Inappropriate implementation in Dawn in Google Chrome prior …8.8
- CVE-2026-110911Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-…9.8
- CVE-2026-110912In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input…7.1
- CVE-2026-110913Memory corruption in DOM in Google Chrome prior to 155.0.805…8.8
Are you affected by CVE-2026-110907?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST