A vulnerability marked as critical has been reported in opensource-workshop connect-cms up to 1.41.0/2.41.0. This affects an unknown function. This manipulation causes server-side request forgery.
This vulnerability is tracked as CVE-2026-32279. The attack is possible to be carried out remotely. No exploit exists.
It is suggested to upgrade the affected component.
