vulnerability in pimcore/studio-backend-bundle (CVE-2026-55212). Data can be tampered with by attackers. Exploitable via `POST /pimcore-studio/api/class/definition/configuration-view/detail/create`. Mitigation: upgrade to `2026.1.6` or later.
SQL injection in pimcore/studio-backend-bundle (CVE-2026-55208). Confidential information can be exposed externally. Exploitable via `POST /pimcore-studio/api/website-settings`. Mitigation: upgrade to `2026.1.6` or later.
vulnerability in pimcore/studio-backend-bundle (CVE-2026-55207). Successful exploitation can lead to full system takeover. Exploitable via `POST /pimcore-studio/api/login/token`. Mitigation: upgrade to `2026.1.6` or later.