CVE-2026-55212: Pimcore is an Open Source Data & Experience Management Platform. Prior to 2025.4.6 and 2026.1.6, the Studio API class definition creation endpoint POST /pimcore-studio/api/class/de
Pimcore is an Open Source Data & Experience Management Platform. Prior to 2025.4.6 and 2026.1.6, the Studio API class definition creation endpoint POST /pimcore-studio/api/class/definition/configuration-view/detail/create is guarded by the objects permission instead of the classes permission, allowing a standard editor-level user to create class definitions without admin privileges. Class definition creation generates new database tables and PHP class files on the server, and missing API-layer UID format validation allows malformed UIDs to reach model-layer validation and return internal exceptions. This issue is fixed in versions 2025.4.6 and 2026.1.6.
Details
Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-55212
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-552120.20% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 10% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-55212 | coverage & exploitation status | NVD · CVE.org |
Recent advisories for Pimcore is an
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- highCVE-2026-55208: Pimcore Studio Backend Bundle is the backend bundle for Pimcore Studio. Prior to 2025.4.6 and …nvd · 2026-07-09
- highCVE-2026-55207: Pimcore is an Open Source Data & Experience Management Platform. Prior to 2025.4.6 and 2026.1.…nvd · 2026-07-09
- highGHSA-r2f4-ff2p-xc64: Pimcore Platform - SQL Injection in DataObject composite index handling during class defi…ghsa · 2026-05-28
- highGHSA-jwcc-gv4m-93x6: Pimcore has a CustomReports Share Bypassghsa · 2026-05-27
- mediumGHSA-332x-r494-54fq: Pimcore has a WordExport Authorization Bypass for Unauthorized Document Exportghsa · 2026-05-27
- highGHSA-wc7j-g8wx-m2qx: Pimcore: Missing Authorization in WebDAV MOVE via unchecked asset move handlingghsa · 2026-05-27
More from NVD Recent CVEs
- lowCVE-2026-61870: ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memo…2026-07-11
- lowCVE-2026-61861: ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption…2026-07-11
- lowCVE-2026-61858: ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and ext…2026-07-11
- lowCVE-2026-61857: ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing nul…2026-07-11
- lowCVE-2026-61465: ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation…2026-07-11