AlchemyCMS alchemy_cms

• CVE-2026-57579 High 7.5 Alchemy: Unauthenticated nested page API leaks restricted & unpublished content 0.6%
• CVE-2026-86777 Medium 5.3 AlchemyCMS before 7.4.16 and 8.x before 8.3.6 Missing Authorization on GET /api/nodes 0.6%
• CVE-2026-23885 Medium 6.4 AlchemyCMS has Authenticated Remote Code Execution (RCE) via eval injection in ResourcesHelper 0.5%