p PatchFirst

PatchFirst · Latest vulnerabilities

statamic/cms 6.24.2: known vulnerabilities

Known vulnerabilities affecting statamic/cms 6.24.2: 1. Compare the fixes below with your installed release.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 1

  1. CVE-2026-71293

    Medium · CVSS 6.2EPSS 0.37%No fix published

    Statamic CMS Unguarded Exposure of 2FA Recovery Codes via Antlers current_user Variable

    Statamic CMS's user-augmentation resolver, AugmentedUser::get in src/Auth/AugmentedUser.php, contains an explicit case for the handle that returns the user's raw two-factor recovery codes with no access restriction.

    statamic/cmsPHP
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →