CVE-2026-32272 | Craft CMS up to 5.5.4/5.6.0 Craft::configure sql injection

A vulnerability was found in Craft CMS up to 5.5.4/5.6.0. It has been rated as critical. This vulnerability affects the function Craft::configure. This manipulation causes sql injection.

This vulnerability is tracked as CVE-2026-32272. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.