CVE-2026-95153

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensitive information via the /admin/ajax/clippy and /admin/ajax/save-as-draft endpoints

Published 2026-10-06. Last modified 2026-10-06.