Sep 11, 2026Sep 11, 2026 · 19 min read · 42 viewsmediaRoot Was Not A WallHow we use Codex to find vulnerabilities worked end to end on CVE-2026-59992 Broken access control in next-tinacms-s3 and its three sibling media adapters GHSA-8mq9-5fw2-5rm4 I. Introduction TinaCMS i19 min read · 42 views