[HIGH] Craft CMS: Authorship spoofing in `entries/save-entry` via pre-check/post-mutation authorization gap

PKSA-rg3c-2r2k-sf93 CVE-2026-50279 GHSA-qq2c-2q8j-jh27

Affected package: craftcms/cms

Affected version: >=5.0.0-RC1,<5.9.21

Reported by:
GitHub