Craftcms

    Dashboard / Vendors

    Products: 10
    Vulnerabilities: 178
    Known Exploited: 4
    13
    Critical Level Threats
    45
    High Level Threats
    90
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-86732

    Craft CMS before 5.10.12 Remote Code Execution via element-index

    Last Modified: Sep 08, 2026
    Published: Sep 08, 2026

    CVE-2026-86731

    Craft CMS 5.0.0-RC1 before 5.10.12 Permission Escalation via UsersController

    Last Modified: Sep 08, 2026
    Published: Sep 08, 2026

    CVE-2026-86730

    Craft CMS 5.0.0-RC1 before 5.10.12 Behavior Injection RCE

    Last Modified: Sep 08, 2026
    Published: Sep 08, 2026

    CVE-2026-79991

    Authenticated SQL Injection via nested eager-loading criteria

    Last Modified: Sep 02, 2026
    Published: Sep 02, 2026

    CVE-2026-79990

    GQL entry mutation `siteId` bypasses schema site scope, enabling cross-site content read/write/delete

    Last Modified: Sep 02, 2026
    Published: Sep 02, 2026
    Items Per Page