Products: 11
Vulnerabilities: 172
Known Exploited: 0
5
Critical Level Threats
55
High Level Threats
108
Medium Level Threats
1
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-109392
Pimcore through 2026.3.1 Stored XSS via ExternalImage Field Version Preview
Last Modified: Oct 13, 2026
Published: Oct 12, 2026
CVE-2026-55416
Pimcore: SQL Injection in Mautic Custom Reports Bundle Due to Direct Concatenation of User-Controlled Configuration Fields Without Parameterization
Last Modified: Sep 15, 2026
Published: Sep 14, 2026
CVE-2026-55072
Pimcore: ClassDefinition UID regex missing end anchor allows SQL injection via Block.php unquoted table name
Last Modified: Sep 15, 2026
Published: Sep 14, 2026
CVE-2026-55634
Pimcore: Remote Code Execution via DataObject Class-Definition Field Name
Last Modified: Aug 28, 2026
Published: Aug 28, 2026
CVE-2026-55220
Pimcore Hotspotimage getDataFromResource() unrestricted Serialize::unserialize over object-store column
Last Modified: Aug 31, 2026
Published: Aug 28, 2026
Items Per Page
