CVE-2026-31016

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross Site Request Forgery vulnerability in Squidex.io Squidex CMS v.7.21.0 and before allows a remote attacker to escalate privileges via the IdentityServer account profile endpoint

Published 2026-06-29. Last modified 2026-06-30.