A vulnerability labeled as critical has been found in October CMS up to 3.7.13/4.1.9. The impacted element is an unknown function. Such manipulation leads to incomplete blacklist.
This vulnerability is listed as CVE-2026-26274. The attack may be performed from remote. There is no available exploit.
The affected component should be upgraded.
