CVE-2026-41177 | squidex up to 7.22.x Restore API Url file inclusion (GHSA-45fq-w37p-qfw5)

A vulnerability, which was classified as problematic, has been found in squidex up to 7.22.x. This impacts an unknown function of the component Restore API. Performing a manipulation of the argument Url results in file inclusion.

This vulnerability is known as CVE-2026-41177. Remote exploitation of the attack is possible. No exploit is available.

It is advisable to upgrade the affected component.