craftcms Latest Vulnerabilities
Latest vulnerabilities published by craftcms
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Sandbox Bypass Vulnerability in Craft CMS
CVE-2026-115938CraftcmsCms8.7HIGHWebhook Vulnerability in Craft Commerce by Mollie
CVE-2026-115937CraftcmsCommerce-mollie8.7HIGHCraft CMS API Vulnerability Affects Non-Admin Users
CVE-2026-115935CraftcmsCms8.7HIGHBlocklist Bypass in Craft CMS Twig Function Exposes Sensitive Information
CVE-2026-112777CraftcmsCms8.7HIGHAuthorization Bypass in Craft CMS by Pixel & Tonic
CVE-2026-112776CraftcmsCms9.3CRITICALAuthentication Bypass in Craft CMS by Pixel & Tonic
CVE-2026-112775CraftcmsCms8.7HIGHRemote Code Execution Vulnerability in Craft CMS Affects Authenticated Administrators
CVE-2026-112774CraftcmsCms8.7HIGHRemote Code Execution Vulnerability in Craft CMS by Pixel & Tonic
CVE-2026-112773CraftcmsCms8.7HIGHRemote Code Execution in Craft CMS Affects Multiple Versions by Craft CMS
CVE-2026-112772CraftcmsCms8.7HIGHTwig Sandbox Allowlist Bypass in Craft CMS by Craft
CVE-2026-112771CraftcmsCms7.1HIGHRemote Code Execution Vulnerability in Craft CMS by Craft
CVE-2026-112770CraftcmsCms8.7HIGHRemote Code Execution in Craft CMS by Craft CMS
CVE-2026-109308CraftcmsCms8.7HIGHDOM-based Cross-Site Scripting Vulnerability in Craft CMS Control Panel
CVE-2026-109307CraftcmsCms2.1LOWMissing Authorization Vulnerability in Craft CMS by Pixel & Tonic
CVE-2026-109306CraftcmsCms6MEDIUMTwig Sandbox Bypass in Craft CMS Affected by Craft Development Team
CVE-2026-109305CraftcmsCms8.7HIGHArbitrary File Read Vulnerability in Craft CMS by Craft CMS
CVE-2026-109304CraftcmsCms6.9MEDIUMAuthenticated Remote Code Execution in Craft CMS Control Panel
CVE-2026-105985CraftcmsCms8.7HIGHUnauthenticated PII Disclosure Vulnerability in Craft CMS by Pixel & Tonic
CVE-2026-92594CraftcmsCms8.7HIGHAuthenticated Remote Code Execution in Craft CMS by Craft
CVE-2026-92593CraftcmsCms8.7HIGHRemote Code Execution Vulnerability in Craft CMS by Craft CMS
CVE-2026-92592CraftcmsCms👾🟡8.7HIGHEnvironment Secrets Exposure in Craft CMS by Pixel & Tonic
CVE-2026-92591CraftcmsCms8.2HIGHStored Cross-Site Scripting in Craft CMS by Craft
CVE-2026-92590CraftcmsCms5.1MEDIUMBroken Access Control in Craft CMS Affecting Multiple Versions
CVE-2026-92589CraftcmsCms5.3MEDIUMRate Limiting Vulnerability in Craft Commerce E-commerce Platform by Craft CMS
CVE-2026-55795CraftcmsCommerce6.9MEDIUMCommand Injection Vulnerability in Craft CMS Affects Non-Admin Users
CVE-2026-79987CraftcmsCms8.7HIGH