CVE-2026-27939 - Vulnerability Analysis

Overview

Statamic 6.0.0 to < 6.4.0 contains a broken access control vulnerability caused by missing verification step for authenticated control panel users, letting attackers escalate privileges, exploit requires authenticated user access.

Severity & Score

Impact

Authenticated users can escalate privileges, potentially gaining unauthorized access to sensitive operations.

Mitigation

Upgrade to version 6.4.0 or later.

References

• https://github.com/statamic/cms/commit/8639ef96217eaa682bc42e8a62769cb7c6a85d3a
• https://github.com/statamic/cms/security/advisories/GHSA-rw9x-pxqx-q789

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Feb 28, 2026

🟠 CVE-2026-27939 - High (8.8) Statmatic is a Laravel and Git powered content management system (CMS). Starting in version 6.0.0 and prior to version 6.4.0, Authenticated Control Panel users may under certain conditions obtain elevated privileges without completing the intended... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-27939/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner