A vulnerability classified as problematic was found in Concrete CMS up to 9.5.0. Impacted is an unknown function of the file /ccm/frontend/conversations/message_page of the component Conversation Message Handler. The manipulation results in missing authorization.
This vulnerability is identified as CVE-2026-8238. The attack can be executed remotely. There is not any exploit available.
