[MEDIUM] Statamic: Missing authorization on Control Panel endpoint allows disclosure of user existence

PKSA-691k-v8bf-zdg7 CVE-2026-64664 GHSA-225x-3jhx-wh4q

Affected package: statamic/cms

Affected version: >=6.0.0,<6.24.0|<5.74.1

Reported by:
GitHub