{
    "document": {
        "category": "csaf_base",
        "csaf_version": "2.0",
        "distribution": {
            "tlp": {
                "label": "WHITE"
            }
        },
        "lang": "en",
        "notes": [
            {
                "category": "legal_disclaimer",
                "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
            }
        ],
        "publisher": {
            "category": "coordinator",
            "contact_details": "cert@ncsc.nl",
            "name": "National Cyber Security Centre",
            "namespace": "https://www.ncsc.nl/"
        },
        "title": "CVE-2026-33162",
        "tracking": {
            "current_release_date": "2026-03-26T21:29:29.936135Z",
            "generator": {
                "date": "2026-02-17T15:00:00Z",
                "engine": {
                    "name": "V.E.L.M.A",
                    "version": "1.7"
                }
            },
            "id": "CVE-2026-33162",
            "initial_release_date": "2026-03-24T20:52:23.970971Z",
            "revision_history": [
                {
                    "date": "2026-03-24T20:52:23.970971Z",
                    "number": "1",
                    "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (3).| CWES updated (1)."
                },
                {
                    "date": "2026-03-24T20:52:27.654628Z",
                    "number": "2",
                    "summary": "NCSC Score created."
                },
                {
                    "date": "2026-03-24T20:56:53.734991Z",
                    "number": "3",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| References created (3).| CWES updated (1)."
                },
                {
                    "date": "2026-03-24T20:56:56.699381Z",
                    "number": "4",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-25T01:00:05.398402Z",
                    "number": "5",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (4).| CWES updated (1)."
                },
                {
                    "date": "2026-03-25T01:00:09.075632Z",
                    "number": "6",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-25T14:39:35.868000Z",
                    "number": "7",
                    "summary": "Unknown change."
                },
                {
                    "date": "2026-03-25T14:39:37.353517Z",
                    "number": "8",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-25T18:33:05.866558Z",
                    "number": "9",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (123).| Product Identifiers created (122).| References created (3).| CWES updated (1)."
                },
                {
                    "date": "2026-03-25T21:49:54.766161Z",
                    "number": "10",
                    "summary": "References created (1)."
                },
                {
                    "date": "2026-03-26T00:45:43.454419Z",
                    "number": "11",
                    "summary": "References created (1)."
                },
                {
                    "date": "2026-03-26T00:50:52.650481Z",
                    "number": "12",
                    "summary": "Source connected.| CVE status created. (valid)| EPSS created."
                },
                {
                    "date": "2026-03-26T00:50:54.807391Z",
                    "number": "13",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-26T21:25:14.731201Z",
                    "number": "14",
                    "summary": "CVSS created.| Products created (1).| Product Identifiers created (1)."
                },
                {
                    "date": "2026-03-26T21:25:17.965946Z",
                    "number": "15",
                    "summary": "NCSC Score updated."
                }
            ],
            "status": "interim",
            "version": "15"
        }
    },
    "product_tree": {
        "branches": [
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/>=5.3.0|<5.9.14",
                                "product": {
                                    "name": "vers:unknown/>=5.3.0|<5.9.14",
                                    "product_id": "CSAFPID-5919259",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Craft Cms"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.3.0",
                                "product": {
                                    "name": "vers:unknown/5.3.0",
                                    "product_id": "CSAFPID-3777114",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.3.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.3.0.1",
                                "product": {
                                    "name": "vers:unknown/5.3.0.1",
                                    "product_id": "CSAFPID-3777117",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.3.0.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.3.0.2",
                                "product": {
                                    "name": "vers:unknown/5.3.0.2",
                                    "product_id": "CSAFPID-3777118",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.3.0.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.3.0.3",
                                "product": {
                                    "name": "vers:unknown/5.3.0.3",
                                    "product_id": "CSAFPID-3777119",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.3.0.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.3.1",
                                "product": {
                                    "name": "vers:unknown/5.3.1",
                                    "product_id": "CSAFPID-3777120",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.3.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.3.2",
                                "product": {
                                    "name": "vers:unknown/5.3.2",
                                    "product_id": "CSAFPID-3777121",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.3.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.3.3",
                                "product": {
                                    "name": "vers:unknown/5.3.3",
                                    "product_id": "CSAFPID-3777122",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.3.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.3.4",
                                "product": {
                                    "name": "vers:unknown/5.3.4",
                                    "product_id": "CSAFPID-3777123",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.3.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.3.5",
                                "product": {
                                    "name": "vers:unknown/5.3.5",
                                    "product_id": "CSAFPID-3777124",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.3.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.3.6",
                                "product": {
                                    "name": "vers:unknown/5.3.6",
                                    "product_id": "CSAFPID-3777125",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.3.6"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.4.0",
                                "product": {
                                    "name": "vers:unknown/5.4.0",
                                    "product_id": "CSAFPID-3777126",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.4.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.4.0.1",
                                "product": {
                                    "name": "vers:unknown/5.4.0.1",
                                    "product_id": "CSAFPID-3777127",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.4.0.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.4.1",
                                "product": {
                                    "name": "vers:unknown/5.4.1",
                                    "product_id": "CSAFPID-3777128",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.4.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.4.10",
                                "product": {
                                    "name": "vers:unknown/5.4.10",
                                    "product_id": "CSAFPID-3777129",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.4.10"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.4.10.1",
                                "product": {
                                    "name": "vers:unknown/5.4.10.1",
                                    "product_id": "CSAFPID-3777130",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.4.10.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.4.2",
                                "product": {
                                    "name": "vers:unknown/5.4.2",
                                    "product_id": "CSAFPID-3777131",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.4.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.4.3",
                                "product": {
                                    "name": "vers:unknown/5.4.3",
                                    "product_id": "CSAFPID-3777132",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.4.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.4.4",
                                "product": {
                                    "name": "vers:unknown/5.4.4",
                                    "product_id": "CSAFPID-3777133",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.4.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.4.5",
                                "product": {
                                    "name": "vers:unknown/5.4.5",
                                    "product_id": "CSAFPID-3777134",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.4.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.4.5.1",
                                "product": {
                                    "name": "vers:unknown/5.4.5.1",
                                    "product_id": "CSAFPID-3777135",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.4.5.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.4.6",
                                "product": {
                                    "name": "vers:unknown/5.4.6",
                                    "product_id": "CSAFPID-3777136",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.4.6"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.4.7",
                                "product": {
                                    "name": "vers:unknown/5.4.7",
                                    "product_id": "CSAFPID-3777137",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.4.7"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.4.7.1",
                                "product": {
                                    "name": "vers:unknown/5.4.7.1",
                                    "product_id": "CSAFPID-3777138",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.4.7.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.4.8",
                                "product": {
                                    "name": "vers:unknown/5.4.8",
                                    "product_id": "CSAFPID-3777139",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.4.8"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.4.9",
                                "product": {
                                    "name": "vers:unknown/5.4.9",
                                    "product_id": "CSAFPID-3777140",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.4.9"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.5.0",
                                "product": {
                                    "name": "vers:unknown/5.5.0",
                                    "product_id": "CSAFPID-3777141",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.5.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.5.0.1",
                                "product": {
                                    "name": "vers:unknown/5.5.0.1",
                                    "product_id": "CSAFPID-3777142",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.5.0.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.5.1",
                                "product": {
                                    "name": "vers:unknown/5.5.1",
                                    "product_id": "CSAFPID-3777143",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.5.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.5.1.1",
                                "product": {
                                    "name": "vers:unknown/5.5.1.1",
                                    "product_id": "CSAFPID-3777144",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.5.1.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.5.10",
                                "product": {
                                    "name": "vers:unknown/5.5.10",
                                    "product_id": "CSAFPID-3777145",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.5.10"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.5.2",
                                "product": {
                                    "name": "vers:unknown/5.5.2",
                                    "product_id": "CSAFPID-3777146",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.5.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.5.3",
                                "product": {
                                    "name": "vers:unknown/5.5.3",
                                    "product_id": "CSAFPID-3777147",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.5.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.5.4",
                                "product": {
                                    "name": "vers:unknown/5.5.4",
                                    "product_id": "CSAFPID-3777148",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.5.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.5.5",
                                "product": {
                                    "name": "vers:unknown/5.5.5",
                                    "product_id": "CSAFPID-3777149",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.5.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.5.6",
                                "product": {
                                    "name": "vers:unknown/5.5.6",
                                    "product_id": "CSAFPID-3777150",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.5.6"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.5.6.1",
                                "product": {
                                    "name": "vers:unknown/5.5.6.1",
                                    "product_id": "CSAFPID-3777151",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.5.6.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.5.7",
                                "product": {
                                    "name": "vers:unknown/5.5.7",
                                    "product_id": "CSAFPID-3777152",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.5.7"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.5.8",
                                "product": {
                                    "name": "vers:unknown/5.5.8",
                                    "product_id": "CSAFPID-3777153",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.5.8"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.5.9",
                                "product": {
                                    "name": "vers:unknown/5.5.9",
                                    "product_id": "CSAFPID-3777154",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.5.9"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.0",
                                "product": {
                                    "name": "vers:unknown/5.6.0",
                                    "product_id": "CSAFPID-3777155",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.0.1",
                                "product": {
                                    "name": "vers:unknown/5.6.0.1",
                                    "product_id": "CSAFPID-3777156",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.0.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.0.2",
                                "product": {
                                    "name": "vers:unknown/5.6.0.2",
                                    "product_id": "CSAFPID-3777157",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.0.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.1",
                                "product": {
                                    "name": "vers:unknown/5.6.1",
                                    "product_id": "CSAFPID-3777158",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.10",
                                "product": {
                                    "name": "vers:unknown/5.6.10",
                                    "product_id": "CSAFPID-3777159",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.10"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.10.1",
                                "product": {
                                    "name": "vers:unknown/5.6.10.1",
                                    "product_id": "CSAFPID-3777160",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.10.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.10.2",
                                "product": {
                                    "name": "vers:unknown/5.6.10.2",
                                    "product_id": "CSAFPID-3777161",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.10.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.11",
                                "product": {
                                    "name": "vers:unknown/5.6.11",
                                    "product_id": "CSAFPID-3777162",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.11"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.12",
                                "product": {
                                    "name": "vers:unknown/5.6.12",
                                    "product_id": "CSAFPID-3777163",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.12"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.13",
                                "product": {
                                    "name": "vers:unknown/5.6.13",
                                    "product_id": "CSAFPID-3777164",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.13"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.14",
                                "product": {
                                    "name": "vers:unknown/5.6.14",
                                    "product_id": "CSAFPID-3777165",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.14"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.15",
                                "product": {
                                    "name": "vers:unknown/5.6.15",
                                    "product_id": "CSAFPID-3777166",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.15"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.16",
                                "product": {
                                    "name": "vers:unknown/5.6.16",
                                    "product_id": "CSAFPID-3777167",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.16"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.17",
                                "product": {
                                    "name": "vers:unknown/5.6.17",
                                    "product_id": "CSAFPID-3777168",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.17"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.2",
                                "product": {
                                    "name": "vers:unknown/5.6.2",
                                    "product_id": "CSAFPID-3777169",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.3",
                                "product": {
                                    "name": "vers:unknown/5.6.3",
                                    "product_id": "CSAFPID-3777170",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.4",
                                "product": {
                                    "name": "vers:unknown/5.6.4",
                                    "product_id": "CSAFPID-3777171",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.5",
                                "product": {
                                    "name": "vers:unknown/5.6.5",
                                    "product_id": "CSAFPID-3777172",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.5.1",
                                "product": {
                                    "name": "vers:unknown/5.6.5.1",
                                    "product_id": "CSAFPID-3777173",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.5.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.6",
                                "product": {
                                    "name": "vers:unknown/5.6.6",
                                    "product_id": "CSAFPID-3777174",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.6"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.7",
                                "product": {
                                    "name": "vers:unknown/5.6.7",
                                    "product_id": "CSAFPID-3777175",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.7"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.8",
                                "product": {
                                    "name": "vers:unknown/5.6.8",
                                    "product_id": "CSAFPID-3777176",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.8"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.9",
                                "product": {
                                    "name": "vers:unknown/5.6.9",
                                    "product_id": "CSAFPID-3777177",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.9"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.9.1",
                                "product": {
                                    "name": "vers:unknown/5.6.9.1",
                                    "product_id": "CSAFPID-3777178",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.6.9.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.7.0",
                                "product": {
                                    "name": "vers:unknown/5.7.0",
                                    "product_id": "CSAFPID-3777179",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.7.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.7.0-beta.1",
                                "product": {
                                    "name": "vers:unknown/5.7.0-beta.1",
                                    "product_id": "CSAFPID-3777180",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.7.0-beta.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.7.0-beta.2",
                                "product": {
                                    "name": "vers:unknown/5.7.0-beta.2",
                                    "product_id": "CSAFPID-3777181",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.7.0-beta.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.7.1",
                                "product": {
                                    "name": "vers:unknown/5.7.1",
                                    "product_id": "CSAFPID-3777182",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.7.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.7.1.1",
                                "product": {
                                    "name": "vers:unknown/5.7.1.1",
                                    "product_id": "CSAFPID-3777183",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.7.1.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.7.10",
                                "product": {
                                    "name": "vers:unknown/5.7.10",
                                    "product_id": "CSAFPID-4969534",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.7.10"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.7.11",
                                "product": {
                                    "name": "vers:unknown/5.7.11",
                                    "product_id": "CSAFPID-4969535",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.7.11"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.7.2",
                                "product": {
                                    "name": "vers:unknown/5.7.2",
                                    "product_id": "CSAFPID-3777184",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.7.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.7.3",
                                "product": {
                                    "name": "vers:unknown/5.7.3",
                                    "product_id": "CSAFPID-3777185",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.7.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.7.4",
                                "product": {
                                    "name": "vers:unknown/5.7.4",
                                    "product_id": "CSAFPID-3777186",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.7.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.7.5",
                                "product": {
                                    "name": "vers:unknown/5.7.5",
                                    "product_id": "CSAFPID-4969536",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.7.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.7.6",
                                "product": {
                                    "name": "vers:unknown/5.7.6",
                                    "product_id": "CSAFPID-4969537",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.7.6"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.7.7",
                                "product": {
                                    "name": "vers:unknown/5.7.7",
                                    "product_id": "CSAFPID-4969538",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.7.7"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.7.8",
                                "product": {
                                    "name": "vers:unknown/5.7.8",
                                    "product_id": "CSAFPID-4969539",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.7.8"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.7.8.1",
                                "product": {
                                    "name": "vers:unknown/5.7.8.1",
                                    "product_id": "CSAFPID-4969540",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.7.8.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.7.8.2",
                                "product": {
                                    "name": "vers:unknown/5.7.8.2",
                                    "product_id": "CSAFPID-4969541",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.7.8.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.7.9",
                                "product": {
                                    "name": "vers:unknown/5.7.9",
                                    "product_id": "CSAFPID-4969542",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.7.9"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.0",
                                "product": {
                                    "name": "vers:unknown/5.8.0",
                                    "product_id": "CSAFPID-4969543",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.1",
                                "product": {
                                    "name": "vers:unknown/5.8.1",
                                    "product_id": "CSAFPID-4969544",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.10",
                                "product": {
                                    "name": "vers:unknown/5.8.10",
                                    "product_id": "CSAFPID-5329249",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.10"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.11",
                                "product": {
                                    "name": "vers:unknown/5.8.11",
                                    "product_id": "CSAFPID-5329250",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.11"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.12",
                                "product": {
                                    "name": "vers:unknown/5.8.12",
                                    "product_id": "CSAFPID-5329251",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.12"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.13",
                                "product": {
                                    "name": "vers:unknown/5.8.13",
                                    "product_id": "CSAFPID-5329252",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.13"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.13.1",
                                "product": {
                                    "name": "vers:unknown/5.8.13.1",
                                    "product_id": "CSAFPID-5329253",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.13.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.13.2",
                                "product": {
                                    "name": "vers:unknown/5.8.13.2",
                                    "product_id": "CSAFPID-5329254",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.13.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.14",
                                "product": {
                                    "name": "vers:unknown/5.8.14",
                                    "product_id": "CSAFPID-5329255",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.14"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.15",
                                "product": {
                                    "name": "vers:unknown/5.8.15",
                                    "product_id": "CSAFPID-5329256",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.15"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.16",
                                "product": {
                                    "name": "vers:unknown/5.8.16",
                                    "product_id": "CSAFPID-5329257",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.16"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.17",
                                "product": {
                                    "name": "vers:unknown/5.8.17",
                                    "product_id": "CSAFPID-5329258",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.17"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.18",
                                "product": {
                                    "name": "vers:unknown/5.8.18",
                                    "product_id": "CSAFPID-5329259",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.18"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.19",
                                "product": {
                                    "name": "vers:unknown/5.8.19",
                                    "product_id": "CSAFPID-5329260",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.19"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.2",
                                "product": {
                                    "name": "vers:unknown/5.8.2",
                                    "product_id": "CSAFPID-4969545",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.20",
                                "product": {
                                    "name": "vers:unknown/5.8.20",
                                    "product_id": "CSAFPID-5329261",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.20"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.21",
                                "product": {
                                    "name": "vers:unknown/5.8.21",
                                    "product_id": "CSAFPID-5586195",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.21"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.22",
                                "product": {
                                    "name": "vers:unknown/5.8.22",
                                    "product_id": "CSAFPID-5667777",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.22"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.23",
                                "product": {
                                    "name": "vers:unknown/5.8.23",
                                    "product_id": "CSAFPID-5667778",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.23"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.3",
                                "product": {
                                    "name": "vers:unknown/5.8.3",
                                    "product_id": "CSAFPID-4969546",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.4",
                                "product": {
                                    "name": "vers:unknown/5.8.4",
                                    "product_id": "CSAFPID-4969547",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.5",
                                "product": {
                                    "name": "vers:unknown/5.8.5",
                                    "product_id": "CSAFPID-4969548",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.6",
                                "product": {
                                    "name": "vers:unknown/5.8.6",
                                    "product_id": "CSAFPID-4969549",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.6"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.7",
                                "product": {
                                    "name": "vers:unknown/5.8.7",
                                    "product_id": "CSAFPID-5329262",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.7"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.8",
                                "product": {
                                    "name": "vers:unknown/5.8.8",
                                    "product_id": "CSAFPID-5329263",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.8"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.9",
                                "product": {
                                    "name": "vers:unknown/5.8.9",
                                    "product_id": "CSAFPID-5329264",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.8.9"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.9.0",
                                "product": {
                                    "name": "vers:unknown/5.9.0",
                                    "product_id": "CSAFPID-5780640",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.9.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.9.0-beta.1",
                                "product": {
                                    "name": "vers:unknown/5.9.0-beta.1",
                                    "product_id": "CSAFPID-5760043",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.9.0-beta.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.9.0-beta.2",
                                "product": {
                                    "name": "vers:unknown/5.9.0-beta.2",
                                    "product_id": "CSAFPID-5780641",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.9.0-beta.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.9.1",
                                "product": {
                                    "name": "vers:unknown/5.9.1",
                                    "product_id": "CSAFPID-5780642",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.9.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.9.10",
                                "product": {
                                    "name": "vers:unknown/5.9.10",
                                    "product_id": "CSAFPID-5830112",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.9.10"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.9.11",
                                "product": {
                                    "name": "vers:unknown/5.9.11",
                                    "product_id": "CSAFPID-5902742",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.9.11"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.9.12",
                                "product": {
                                    "name": "vers:unknown/5.9.12",
                                    "product_id": "CSAFPID-5902743",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.9.12"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.9.13",
                                "product": {
                                    "name": "vers:unknown/5.9.13",
                                    "product_id": "CSAFPID-5902744",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.9.13"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.9.2",
                                "product": {
                                    "name": "vers:unknown/5.9.2",
                                    "product_id": "CSAFPID-5780643",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.9.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.9.3",
                                "product": {
                                    "name": "vers:unknown/5.9.3",
                                    "product_id": "CSAFPID-5780644",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.9.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.9.4",
                                "product": {
                                    "name": "vers:unknown/5.9.4",
                                    "product_id": "CSAFPID-5780645",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.9.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.9.5",
                                "product": {
                                    "name": "vers:unknown/5.9.5",
                                    "product_id": "CSAFPID-5780646",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.9.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.9.6",
                                "product": {
                                    "name": "vers:unknown/5.9.6",
                                    "product_id": "CSAFPID-5780647",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.9.6"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.9.7",
                                "product": {
                                    "name": "vers:unknown/5.9.7",
                                    "product_id": "CSAFPID-5830113",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.9.7"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.9.8",
                                "product": {
                                    "name": "vers:unknown/5.9.8",
                                    "product_id": "CSAFPID-5830114",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.9.8"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.9.9",
                                "product": {
                                    "name": "vers:unknown/5.9.9",
                                    "product_id": "CSAFPID-5830115",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/craftcms/cms@5.9.9"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/>=5.3.0|<5.9.14",
                                "product": {
                                    "name": "vers:unknown/>=5.3.0|<5.9.14",
                                    "product_id": "CSAFPID-5902897"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "cms"
                    }
                ],
                "category": "vendor",
                "name": "Craftcms"
            }
        ]
    },
    "vulnerabilities": [
        {
            "cve": "CVE-2026-33162",
            "cwe": {
                "id": "CWE-862",
                "name": "Missing Authorization"
            },
            "notes": [
                {
                    "category": "description",
                    "text": "Craft CMS is a content management system (CMS). From version 5.3.0 to before version 5.9.14, an authenticated control panel user with only accessCp can move entries across sections via POST /actions/entries/move-to-section, even when they do not have saveEntries:{sectionUid} permission for either source or destination section. This issue has been patched in version 5.9.14.",
                    "title": "nvd - https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-33162"
                },
                {
                    "category": "description",
                    "text": "Craft CMS is a content management system (CMS). From version 5.3.0 to before version 5.9.14, an authenticated control panel user with only accessCp can move entries across sections via POST /actions/entries/move-to-section, even when they do not have saveEntries:{sectionUid} permission for either source or destination section. This issue has been patched in version 5.9.14.",
                    "title": "cveprojectv5 - https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33162.json"
                },
                {
                    "category": "description",
                    "text": "### Summary\n\nAn authenticated control panel user with only accessCp can move entries across sections via POST `/actions/entries/move-to-section`, even when they do not have `saveEntries:{sectionUid}` permission for either source or destination section.\n\n### Details\n\n#### Root-cause analysis\n\n  1. actionMoveToSection accepts sectionId and entryIds, loads entries, and iterates:\n`Craft::$app->getEntries()->moveEntryToSection($entry, $section)`.\n  2. The endpoint does not enforce per-entry or per-section authorization checks.\n  3. `moveEntryToSection()` also does not enforce current-user authorization.\n  4. There is a permission check in `actionMoveToSectionModalData` for building UI options, but that check is not enforced in the actual endpoint.\n  5. Therefore, a direct POST request can bypass UI filtering and perform unauthorized entry moves.\n\n ### Impact\n\n* This is an authorization bypass permitting unauthorized content changes.\n* Authenticated low-privileged control panel users can move entries they should not be able to manage, violating integrity and potentially disrupting routing/editorial controls.",
                    "title": "github - https://api.github.com/advisories/GHSA-f582-6gf6-gx4g"
                },
                {
                    "category": "description",
                    "text": "### Summary\n\nAn authenticated control panel user with only accessCp can move entries across sections via POST `/actions/entries/move-to-section`, even when they do not have `saveEntries:{sectionUid}` permission for either source or destination section.\n\n### Details\n\n#### Root-cause analysis\n\n  1. actionMoveToSection accepts sectionId and entryIds, loads entries, and iterates:\n`Craft::$app->getEntries()->moveEntryToSection($entry, $section)`.\n  2. The endpoint does not enforce per-entry or per-section authorization checks.\n  3. `moveEntryToSection()` also does not enforce current-user authorization.\n  4. There is a permission check in `actionMoveToSectionModalData` for building UI options, but that check is not enforced in the actual endpoint.\n  5. Therefore, a direct POST request can bypass UI filtering and perform unauthorized entry moves.\n\n ### Impact\n\n* This is an authorization bypass permitting unauthorized content changes.\n* Authenticated low-privileged control panel users can move entries they should not be able to manage, violating integrity and potentially disrupting routing/editorial controls.",
                    "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Packagist%2FGHSA-f582-6gf6-gx4g.json?alt=media"
                },
                {
                    "category": "other",
                    "text": "0.00036",
                    "title": "EPSS"
                },
                {
                    "category": "other",
                    "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                    "title": "CVSSV4"
                },
                {
                    "category": "other",
                    "text": "4.9",
                    "title": "CVSSV4 base score"
                },
                {
                    "category": "other",
                    "text": "4.6",
                    "title": "NCSC Score"
                },
                {
                    "category": "other",
                    "text": "The value of the most recent EPSS score",
                    "title": "NCSC Score top decreasing factors"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-5902897",
                    "CSAFPID-3777114",
                    "CSAFPID-3777117",
                    "CSAFPID-3777118",
                    "CSAFPID-3777119",
                    "CSAFPID-3777120",
                    "CSAFPID-3777121",
                    "CSAFPID-3777122",
                    "CSAFPID-3777123",
                    "CSAFPID-3777124",
                    "CSAFPID-3777125",
                    "CSAFPID-3777126",
                    "CSAFPID-3777127",
                    "CSAFPID-3777128",
                    "CSAFPID-3777129",
                    "CSAFPID-3777130",
                    "CSAFPID-3777131",
                    "CSAFPID-3777132",
                    "CSAFPID-3777133",
                    "CSAFPID-3777134",
                    "CSAFPID-3777135",
                    "CSAFPID-3777136",
                    "CSAFPID-3777137",
                    "CSAFPID-3777138",
                    "CSAFPID-3777139",
                    "CSAFPID-3777140",
                    "CSAFPID-3777141",
                    "CSAFPID-3777142",
                    "CSAFPID-3777143",
                    "CSAFPID-3777144",
                    "CSAFPID-3777145",
                    "CSAFPID-3777146",
                    "CSAFPID-3777147",
                    "CSAFPID-3777148",
                    "CSAFPID-3777149",
                    "CSAFPID-3777150",
                    "CSAFPID-3777151",
                    "CSAFPID-3777152",
                    "CSAFPID-3777153",
                    "CSAFPID-3777154",
                    "CSAFPID-3777155",
                    "CSAFPID-3777156",
                    "CSAFPID-3777157",
                    "CSAFPID-3777158",
                    "CSAFPID-3777159",
                    "CSAFPID-3777160",
                    "CSAFPID-3777161",
                    "CSAFPID-3777162",
                    "CSAFPID-3777163",
                    "CSAFPID-3777164",
                    "CSAFPID-3777165",
                    "CSAFPID-3777166",
                    "CSAFPID-3777167",
                    "CSAFPID-3777168",
                    "CSAFPID-3777169",
                    "CSAFPID-3777170",
                    "CSAFPID-3777171",
                    "CSAFPID-3777172",
                    "CSAFPID-3777173",
                    "CSAFPID-3777174",
                    "CSAFPID-3777175",
                    "CSAFPID-3777176",
                    "CSAFPID-3777177",
                    "CSAFPID-3777178",
                    "CSAFPID-3777179",
                    "CSAFPID-3777180",
                    "CSAFPID-3777181",
                    "CSAFPID-3777182",
                    "CSAFPID-3777183",
                    "CSAFPID-3777184",
                    "CSAFPID-3777185",
                    "CSAFPID-3777186",
                    "CSAFPID-4969534",
                    "CSAFPID-4969535",
                    "CSAFPID-4969536",
                    "CSAFPID-4969537",
                    "CSAFPID-4969538",
                    "CSAFPID-4969539",
                    "CSAFPID-4969540",
                    "CSAFPID-4969541",
                    "CSAFPID-4969542",
                    "CSAFPID-4969543",
                    "CSAFPID-4969544",
                    "CSAFPID-4969545",
                    "CSAFPID-4969546",
                    "CSAFPID-4969547",
                    "CSAFPID-4969548",
                    "CSAFPID-4969549",
                    "CSAFPID-5329249",
                    "CSAFPID-5329250",
                    "CSAFPID-5329251",
                    "CSAFPID-5329252",
                    "CSAFPID-5329253",
                    "CSAFPID-5329254",
                    "CSAFPID-5329255",
                    "CSAFPID-5329256",
                    "CSAFPID-5329257",
                    "CSAFPID-5329258",
                    "CSAFPID-5329259",
                    "CSAFPID-5329260",
                    "CSAFPID-5329261",
                    "CSAFPID-5329262",
                    "CSAFPID-5329263",
                    "CSAFPID-5329264",
                    "CSAFPID-5586195",
                    "CSAFPID-5667777",
                    "CSAFPID-5667778",
                    "CSAFPID-5760043",
                    "CSAFPID-5780640",
                    "CSAFPID-5780641",
                    "CSAFPID-5780642",
                    "CSAFPID-5780643",
                    "CSAFPID-5780644",
                    "CSAFPID-5780645",
                    "CSAFPID-5780646",
                    "CSAFPID-5780647",
                    "CSAFPID-5830112",
                    "CSAFPID-5830113",
                    "CSAFPID-5830114",
                    "CSAFPID-5830115",
                    "CSAFPID-5902742",
                    "CSAFPID-5902743",
                    "CSAFPID-5902744",
                    "CSAFPID-5919259"
                ]
            },
            "references": [
                {
                    "category": "external",
                    "summary": "Source - nvd",
                    "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-33162"
                },
                {
                    "category": "external",
                    "summary": "Source - cveprojectv5",
                    "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33162.json"
                },
                {
                    "category": "external",
                    "summary": "Source - github",
                    "url": "https://api.github.com/advisories/GHSA-f582-6gf6-gx4g"
                },
                {
                    "category": "external",
                    "summary": "Source - osv",
                    "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Packagist%2FGHSA-f582-6gf6-gx4g.json?alt=media"
                },
                {
                    "category": "external",
                    "summary": "Source - first",
                    "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; github; nvd; osv",
                    "url": "https://github.com/craftcms/cms/commit/3c1ab1c4445dd9237855a66e6a06ecf3591a718e"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; github; nvd; osv",
                    "url": "https://github.com/craftcms/cms/releases/tag/5.9.14"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; github; nvd; osv",
                    "url": "https://github.com/craftcms/cms/security/advisories/GHSA-f582-6gf6-gx4g"
                },
                {
                    "category": "external",
                    "summary": "Reference - github",
                    "url": "https://github.com/advisories/GHSA-f582-6gf6-gx4g"
                },
                {
                    "category": "external",
                    "summary": "Reference - github; osv",
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33162"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
                        "baseScore": 6.5,
                        "baseSeverity": "MEDIUM"
                    },
                    "products": [
                        "CSAFPID-3777114",
                        "CSAFPID-3777117",
                        "CSAFPID-3777118",
                        "CSAFPID-3777119",
                        "CSAFPID-3777120",
                        "CSAFPID-3777121",
                        "CSAFPID-3777122",
                        "CSAFPID-3777123",
                        "CSAFPID-3777124",
                        "CSAFPID-3777125",
                        "CSAFPID-3777126",
                        "CSAFPID-3777127",
                        "CSAFPID-3777128",
                        "CSAFPID-3777129",
                        "CSAFPID-3777130",
                        "CSAFPID-3777131",
                        "CSAFPID-3777132",
                        "CSAFPID-3777133",
                        "CSAFPID-3777134",
                        "CSAFPID-3777135",
                        "CSAFPID-3777136",
                        "CSAFPID-3777137",
                        "CSAFPID-3777138",
                        "CSAFPID-3777139",
                        "CSAFPID-3777140",
                        "CSAFPID-3777141",
                        "CSAFPID-3777142",
                        "CSAFPID-3777143",
                        "CSAFPID-3777144",
                        "CSAFPID-3777145",
                        "CSAFPID-3777146",
                        "CSAFPID-3777147",
                        "CSAFPID-3777148",
                        "CSAFPID-3777149",
                        "CSAFPID-3777150",
                        "CSAFPID-3777151",
                        "CSAFPID-3777152",
                        "CSAFPID-3777153",
                        "CSAFPID-3777154",
                        "CSAFPID-3777155",
                        "CSAFPID-3777156",
                        "CSAFPID-3777157",
                        "CSAFPID-3777158",
                        "CSAFPID-3777159",
                        "CSAFPID-3777160",
                        "CSAFPID-3777161",
                        "CSAFPID-3777162",
                        "CSAFPID-3777163",
                        "CSAFPID-3777164",
                        "CSAFPID-3777165",
                        "CSAFPID-3777166",
                        "CSAFPID-3777167",
                        "CSAFPID-3777168",
                        "CSAFPID-3777169",
                        "CSAFPID-3777170",
                        "CSAFPID-3777171",
                        "CSAFPID-3777172",
                        "CSAFPID-3777173",
                        "CSAFPID-3777174",
                        "CSAFPID-3777175",
                        "CSAFPID-3777176",
                        "CSAFPID-3777177",
                        "CSAFPID-3777178",
                        "CSAFPID-3777179",
                        "CSAFPID-3777180",
                        "CSAFPID-3777181",
                        "CSAFPID-3777182",
                        "CSAFPID-3777183",
                        "CSAFPID-3777184",
                        "CSAFPID-3777185",
                        "CSAFPID-3777186",
                        "CSAFPID-4969534",
                        "CSAFPID-4969535",
                        "CSAFPID-4969536",
                        "CSAFPID-4969537",
                        "CSAFPID-4969538",
                        "CSAFPID-4969539",
                        "CSAFPID-4969540",
                        "CSAFPID-4969541",
                        "CSAFPID-4969542",
                        "CSAFPID-4969543",
                        "CSAFPID-4969544",
                        "CSAFPID-4969545",
                        "CSAFPID-4969546",
                        "CSAFPID-4969547",
                        "CSAFPID-4969548",
                        "CSAFPID-4969549",
                        "CSAFPID-5329249",
                        "CSAFPID-5329250",
                        "CSAFPID-5329251",
                        "CSAFPID-5329252",
                        "CSAFPID-5329253",
                        "CSAFPID-5329254",
                        "CSAFPID-5329255",
                        "CSAFPID-5329256",
                        "CSAFPID-5329257",
                        "CSAFPID-5329258",
                        "CSAFPID-5329259",
                        "CSAFPID-5329260",
                        "CSAFPID-5329261",
                        "CSAFPID-5329262",
                        "CSAFPID-5329263",
                        "CSAFPID-5329264",
                        "CSAFPID-5586195",
                        "CSAFPID-5667777",
                        "CSAFPID-5667778",
                        "CSAFPID-5760043",
                        "CSAFPID-5780640",
                        "CSAFPID-5780641",
                        "CSAFPID-5780642",
                        "CSAFPID-5780643",
                        "CSAFPID-5780644",
                        "CSAFPID-5780645",
                        "CSAFPID-5780646",
                        "CSAFPID-5780647",
                        "CSAFPID-5830112",
                        "CSAFPID-5830113",
                        "CSAFPID-5830114",
                        "CSAFPID-5830115",
                        "CSAFPID-5902742",
                        "CSAFPID-5902743",
                        "CSAFPID-5902744",
                        "CSAFPID-5902897",
                        "CSAFPID-5919259"
                    ]
                }
            ],
            "title": "CVE-2026-33162"
        }
    ]
}