NVD HIGH: CVE-2026-102811 — Marmite through 0.4.2 contains missing authentication in the development server ...
Marmite through 0.4.2 contains missing authentication in the development server endpoints /__marmite__/content, /__marmite__/config, and /__marmite__/file/, allowing unauthenticated attackers to create, modify, and overwrite site content and configuration. Attackers can exploit unsanitized path parameters in handle_create_content and handle_clone_content to write files outside the project director
CVE-2026-102811