CVE-2026-82395: Sulu Media Move Missing Permission Checkcve-2026-82395-sulu-media-move-missing-permission-check
Media entity collection reassignment performed without verifying permissions on the source and destination collections using SecurityChecker. An authenticated user could move items out of restricted collections to access unauthorized media.