Products: 11
Vulnerabilities: 203
Known Exploited: 4
14
Critical Level Threats
61
High Level Threats
97
Medium Level Threats
1
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-115938
Low privilege condition filter escapes Twig sandbox, recovers "securityKey" and reaches RCE
Last Modified: Oct 23, 2026
Published: Oct 23, 2026
CVE-2026-115937
Unauthenticated payment reuse allows unpaid orders to be marked as paid
Last Modified: Oct 23, 2026
Published: Oct 23, 2026
CVE-2026-115935
Control panel only API response emulation replaces "securityKey" and reaches server RCE
Last Modified: Oct 23, 2026
Published: Oct 23, 2026
CVE-2026-112777
Craft CMS before 4.18.8 and 5.11.0 Twig create() Blocklist Bypass Leading to RCE
Last Modified: Oct 20, 2026
Published: Oct 19, 2026
CVE-2026-112776
Craft CMS 5.0.0 before 5.11.0 GraphQL Site-Scope Bypass via Mutations
Last Modified: Oct 20, 2026
Published: Oct 19, 2026
Items Per Page
