LavaLite cms

• CVE-2026-113358 High 7.5 LavaLite CMS through 10.1.2 Missing Authentication via Filer Download Routes 0.4%
• CVE-2026-108951 Medium 6.5 LavaLite CMS through 10.1.2 Authorization Bypass via User Update API 0.3%