Products: 1
Vulnerabilities: 221
Known Exploited: 0
8
Critical Level Threats
46
High Level Threats
126
Medium Level Threats
18
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-18120
Missing Authorization in legacy Express entries search endpoint allows disclosure of Express entry data
Last Modified: Sep 21, 2026
Published: Sep 16, 2026
CVE-2026-85387
Concrete CMS before 9.5.4 allows a deactivated user to retain OAuth-authenticated REST API access
Last Modified: Sep 21, 2026
Published: Sep 16, 2026
CVE-2026-87031
Missing authorization in the REST API user creation endpoint in Concrete CMS 9.2.0 through 9.5.3 allows arbitrary account creation
Last Modified: Sep 21, 2026
Published: Sep 16, 2026
CVE-2026-87028
Cross-Board IDOR in the Board Custom Slot Preview in Concrete CMS 9.0.0 through 9.5.3 Discloses Restricted Page Summary Fields
Last Modified: Sep 21, 2026
Published: Sep 16, 2026
CVE-2026-85386
Concrete CMS before 9.5.4 stored is vulneratble to cross-site scripting via unauthenticated XML/XSLT file upload in the Form Block
Last Modified: Sep 21, 2026
Published: Sep 16, 2026
Items Per Page
