craftcms Cms Vulnerabilities
Craftcms Cms vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Sandbox Bypass Vulnerability in Craft CMS
CVE-2026-115938CraftcmsCms8.7HIGHCraft CMS API Vulnerability Affects Non-Admin Users
CVE-2026-115935CraftcmsCms8.7HIGHBlocklist Bypass in Craft CMS Twig Function Exposes Sensitive Information
CVE-2026-112777CraftcmsCms8.7HIGHAuthorization Bypass in Craft CMS by Pixel & Tonic
CVE-2026-112776CraftcmsCms9.3CRITICALAuthentication Bypass in Craft CMS by Pixel & Tonic
CVE-2026-112775CraftcmsCms8.7HIGHRemote Code Execution Vulnerability in Craft CMS Affects Authenticated Administrators
CVE-2026-112774CraftcmsCms8.7HIGHRemote Code Execution Vulnerability in Craft CMS by Pixel & Tonic
CVE-2026-112773CraftcmsCms8.7HIGHRemote Code Execution in Craft CMS Affects Multiple Versions by Craft CMS
CVE-2026-112772CraftcmsCms8.7HIGHTwig Sandbox Allowlist Bypass in Craft CMS by Craft
CVE-2026-112771CraftcmsCms7.1HIGHRemote Code Execution Vulnerability in Craft CMS by Craft
CVE-2026-112770CraftcmsCms8.7HIGHRemote Code Execution in Craft CMS by Craft CMS
CVE-2026-109308CraftcmsCms8.7HIGHDOM-based Cross-Site Scripting Vulnerability in Craft CMS Control Panel
CVE-2026-109307CraftcmsCms2.1LOWMissing Authorization Vulnerability in Craft CMS by Pixel & Tonic
CVE-2026-109306CraftcmsCms6MEDIUMTwig Sandbox Bypass in Craft CMS Affected by Craft Development Team
CVE-2026-109305CraftcmsCms8.7HIGHArbitrary File Read Vulnerability in Craft CMS by Craft CMS
CVE-2026-109304CraftcmsCms6.9MEDIUMAuthenticated Remote Code Execution in Craft CMS Control Panel
CVE-2026-105985CraftcmsCms8.7HIGHUnauthenticated PII Disclosure Vulnerability in Craft CMS by Pixel & Tonic
CVE-2026-92594CraftcmsCms8.7HIGHAuthenticated Remote Code Execution in Craft CMS by Craft
CVE-2026-92593CraftcmsCms8.7HIGHRemote Code Execution Vulnerability in Craft CMS by Craft CMS
CVE-2026-92592CraftcmsCms👾🟡8.7HIGHEnvironment Secrets Exposure in Craft CMS by Pixel & Tonic
CVE-2026-92591CraftcmsCms8.2HIGHStored Cross-Site Scripting in Craft CMS by Craft
CVE-2026-92590CraftcmsCms5.1MEDIUMBroken Access Control in Craft CMS Affecting Multiple Versions
CVE-2026-92589CraftcmsCms5.3MEDIUMCommand Injection Vulnerability in Craft CMS Affects Non-Admin Users
CVE-2026-79987CraftcmsCms8.7HIGHRemote Code Execution Vulnerability in Craft CMS by Craft
CVE-2026-86732CraftcmsCms8.7HIGHPermission Escalation in Craft CMS by Craft
CVE-2026-86731CraftcmsCms7.1HIGH