Octobercms

    Dashboard / Vendors

    Products: 5
    Vulnerabilities: 66
    Known Exploited: 1
    5
    Critical Level Threats
    16
    High Level Threats
    35
    Medium Level Threats
    10
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-101005

    October CMS SSRF Protection ResizeImages.php validateExternalImageHost server-side request forgery

    Last Modified: Sep 28, 2026
    Published: Sep 28, 2026

    CVE-2026-100909

    OctoberCMS ResizeImages.php getSourcePathForResize server-side request forgery

    Last Modified: Sep 28, 2026
    Published: Sep 28, 2026

    CVE-2026-49400

    October CMS: PHP Object Injection via Backend Widget Session Storage

    Last Modified: Sep 16, 2026
    Published: Sep 14, 2026

    CVE-2026-46696

    October CMS: Safe Mode Sandbox Bypass via Session Store and Forwarded Builder Calls

    Last Modified: Sep 17, 2026
    Published: Sep 14, 2026

    CVE-2026-29179

    October: Editor Sub-Permission Bypass for Asset and Blueprint File Operations

    Last Modified: Apr 22, 2026
    Published: Apr 21, 2026
    Items Per Page
    Octobercms Vulnerabilities & Security CVEs | CVE-DB