[MEDIUM] Statamic: Missing authorization on navigation endpoint allows disclosure of restricted entries

PKSA-yprw-4kcc-73cg CVE-2026-64662 GHSA-qh8c-7588-qfrv

Affected package: statamic/cms

Affected version: >=6.0.0,<6.24.0|<5.74.1

Reported by:
GitHub