CVE-2026-56092
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Aug 25, 2026
Vendor
unknown
Description
The extension forces empty frontend-group and subpage-inheritance restrictions onto page records during indexer sub-requests, and this forged state was persisted into the shared rootline cache, allowing anonymous visitors to bypass extendToSubpages-inherited access restrictions on cached pages.