[MEDIUM] Contao: Improper access control in the preview links module

PKSA-7n2q-445d-xssj CVE-2026-107850 GHSA-q6wp-fr43-gm9v

Affected package: contao/core-bundle

Affected version: >=5.7.1,<5.7.12

Reported by:
GitHub