concrete cms Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by concrete cms

JSON RSS CSV 🔔 Create Alert Trigger

21 May 2026

Stored XSS Vulnerability in Concrete CMS Affects User Security
CVE-2026-8203
Concrete CmsConcrete Cms7.3HIGH
Stored XSS Vulnerability in Concrete CMS 9.5.0 and Below
CVE-2026-8197
Concrete CmsConcrete Cms7.3HIGH
Privilege Escalation Vulnerability in Concrete CMS by Concrete
CVE-2026-8350
Concrete CmsConcrete Cms7.5HIGH
CSRF Vulnerability in Concrete CMS Affecting Administrators
CVE-2026-8421
Concrete CmsConcrete Cms7.5HIGH
Cross-Site Request Forgery in Concrete CMS via Unvalidated Token in Update Process
CVE-2026-8428
Concrete CmsConcrete Cms7.5HIGH
CSRF Vulnerability in Concrete CMS 9.5.0 and Below
CVE-2026-8426
Concrete CmsConcrete Cms7.5HIGH
CSRF Vulnerability in Concrete CMS Versions Up to 9.5.0
CVE-2026-8140
Concrete CmsConcrete Cms7.5HIGH
CSRF Vulnerability in Concrete CMS Versions Below 9.5.0
CVE-2026-8417
Concrete CmsConcrete Cms7.5HIGH
Remote Code Execution Vulnerability in Concrete CMS by Concrete5
CVE-2026-8135
Concrete CmsConcrete Cms8.9HIGH
Path Traversal Vulnerability in Concrete CMS by Concrete5
CVE-2026-8134
Concrete CmsConcrete Cms9.4CRITICAL

4 March 2026

Remote Code Execution Vulnerability in Concrete CMS by PHP Object Injection
CVE-2026-3452
Concrete CmsConcrete Cms8.9HIGH