CVE-2026-125870 Blast Radius

MEDIUM • CVSS 4.2BookStack before 26.09.3 contains a missing authorization vulnerability in ImageController::checkImagePermission() that allows authenticated non-admin…

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-125870.

Book a Demo →← Back to CVE-2026-125870