CVE-2025-59022 — Backend users who had access to the recycler module could delete arbitrary data from any database table defined in the TCA - regardless of whether they had permission to that particular table. This al — CVE Database · The Intelligence Room