Post #124108 8 Oct 13, 2026, 14:43 UTC CVE Alert: CVE-2026-109308 - craftcms - cms - https://www.redpacketsecurity.com/cve-alert-cve-2026-109308-craftcms-cms/ RedPacket Security CVE Alert: CVE-2026-109308 - craftcms - cms - RedPacket Security Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 passes the raw 'updates' request parameter in AppController::actionCacheUpdates to UpdatesModel without