CVE-2026-59075: Dynamic LINQ Injection in Edito CMS
Edito CMS is vulnerable to Dynamic LINQ injection. Due to improper input validation, an authenticated attacker can inject conditional expressions into the sort parameter of paginated administrative endpoints. Analyzing the returned result order allows the attacker to extract value of any field character by character, leading to potential exposure of sensitive data.
This issue was fixed in version 5.10.2607. Hotfixes for older versions (5.8) have also been released.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Edito CMSto a version that resolves this vulnerability.Fixed in 5.10.2607
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must be authenticated to access the affected paginated administrative endpoints. The attack is performed remotely and does not require user interaction.
What access does exploitation provide?
By injecting conditional expressions through the sort parameter and observing result ordering, an attacker can extract the value of any field character by character. This can expose sensitive data available through the affected administrative endpoints.
Which versions have fixes available?
The issue was fixed in Edito CMS version 5.10.2607. Hotfixes are also available for older 5.8 versions.