Login Request a demo
MA
Product
Mautic
by Acquia · last CVE Feb 24, 2026
36
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities36In the news0Timeline
Severity mix
Critical 6High 7Medium 22Low 1
Severity
All severities36Critical6High7Medium22Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mautic to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-3105
8.8
0%
Feb 24
SQL Injection in Contact Activity API Sorting
Affected: 2.10.0 before 4.4.19; 5.0.0 before 5.2.10; 6.0.0 before 6.0.8; 7.0.0 before 7.0.1
CVE-2017-8874
8.8
1%
May 10
Multiple cross-site request forgery (CSRF) vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that (1) delete email…
Affected: 1.4.1
CVE-2021-27916
8.1
1%
Sep 17
Relative Path Traversal / Arbitrary File Deletion in Mautic (GrapesJS Builder)
Affected: 3.3.0 before 4.4.12; 5.0.0 before 5.0.4
CVE-2017-1000489
8.1
1%
Jan 3
Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address
Affected: 2.0.0; 2.0.1; 2.1.0; 2.1.1; 2.2.0; 2.2.1; +16 more
CVE-2024-47053
7.7
1%
Feb 26
Improper Authorization in Reporting API
Affected: 1.0.1 before 5.2.3
CVE-2022-25770
7.5
0%
Sep 18
Insufficient authentication in upgrade flow
Affected: 1.0.1 before 4.4.13; 5.0.0 before 5.1.1; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +3 more
CVE-2022-25775
7.2
1%
Sep 18
SQL Injection in dynamic Reports
Affected: 2.14.1 before 4.4.12; 5.0.0 before 5.0.4
Showing 7