{"uuid": "20e23352-05de-413f-9174-b0bb139e7ae0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18110", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwbgiqcozo2e", "content": "\ud83d\udccc CVE-2026-18110 - Concrete CMS 9 (9.0.0 through 9.5.2) does not perform an authorization check on the user selector autocomplete endpoint (/ccm/system/user/autocomplete... https://www.cyberhub.blog/cves/CVE-2026-18110", "creation_timestamp": "2026-09-24T14:07:08.536707Z"}