Vulnerability Bulletins |
CVE-2026-32266 |
|
| Affected software | |
| The Google Cloud Storage for Craft CMS plugin provides a Google Cloud Storage integration for Craft CMS. In versions on the 2.x branch prior to 2.2.1, the `DefaultController->actionLoadBucketData()` endpoint allows unauthenticated users with a valid CSRF token to view a list of buckets that the plugin is allowed to see. Users should update to version 2.2.1 of the plugin to mitigate the issue. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-32266 | |