In Concrete CMS before 9.5.3, the SEO Bulk Update Meta Tags editor did not check per-page edit permissions before saving. (CVE-2026-81923)
Concrete CMS versions before 9.5.3 contain a vulnerability in the SEO Bulk Update Meta Tags editor where per-page edit permissions were not verified before saving changes. This allowed users with access to the bulk SEO tool, who could view but not edit certain pages, to modify meta titles, meta descriptions, and URL handles of those pages. The vulnerability was assigned a low severity score by the Concrete CMS security team.
AI Analysis
Technical Summary
In Concrete CMS before version 9.5.3, the SEO Bulk Update Meta Tags editor failed to check per-page edit permissions during the saveRecord() action. Although the action validated the per-page CSRF token, it did not call canEditPageProperties() for the target page. Consequently, users with access to the bulk SEO tool who could view but not edit certain pages could alter meta title, meta description, and URL handle information, affecting the presentation and live URLs of protected content. The issue is tracked as CVE-2026-81923 and has a CVSS v4.0 base score of 2.1.
Potential Impact
Users with bulk SEO tool access but without edit permissions on specific pages could modify meta tags and URL handles of those pages, potentially altering how content is presented and accessed. This could lead to unauthorized changes in SEO-related metadata and URLs, but does not allow broader content edits or system compromise.
Mitigation Recommendations
A fix is available in Concrete CMS version 9.5.3 that addresses this permission check issue. Users should upgrade to version 9.5.3 or later to remediate this vulnerability.
In Concrete CMS before 9.5.3, the SEO Bulk Update Meta Tags editor did not check per-page edit permissions before saving. (CVE-2026-81923)
Description
Concrete CMS versions before 9.5.3 contain a vulnerability in the SEO Bulk Update Meta Tags editor where per-page edit permissions were not verified before saving changes. This allowed users with access to the bulk SEO tool, who could view but not edit certain pages, to modify meta titles, meta descriptions, and URL handles of those pages. The vulnerability was assigned a low severity score by the Concrete CMS security team.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
In Concrete CMS before version 9.5.3, the SEO Bulk Update Meta Tags editor failed to check per-page edit permissions during the saveRecord() action. Although the action validated the per-page CSRF token, it did not call canEditPageProperties() for the target page. Consequently, users with access to the bulk SEO tool who could view but not edit certain pages could alter meta title, meta description, and URL handle information, affecting the presentation and live URLs of protected content. The issue is tracked as CVE-2026-81923 and has a CVSS v4.0 base score of 2.1.
Potential Impact
Users with bulk SEO tool access but without edit permissions on specific pages could modify meta tags and URL handles of those pages, potentially altering how content is presented and accessed. This could lead to unauthorized changes in SEO-related metadata and URLs, but does not allow broader content edits or system compromise.
Mitigation Recommendations
A fix is available in Concrete CMS version 9.5.3 that addresses this permission check issue. Users should upgrade to version 9.5.3 or later to remediate this vulnerability.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-4q84-hvmx-qpr3
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-81923"]
- Database Specific Severity
- LOW
- Cvss Version
- 4.0
Threat ID: 6aaa07ea55bf5e2cf5ea3d38
Added to database: 09/16/2026, 03:07:22 UTC
Last enriched: 09/16/2026, 04:58:49 UTC
Last updated: 09/16/2026, 22:01:39 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.