CM
Product
cms
by craftcms · last CVE Oct 23, 2026
On CISA KEVExploited in the wild
137
CVEs
3
On KEV
10.0
Max CVSS
16
New 30D
Severity mix
Critical 9High 61Medium 67Low 0
Watch

Add cms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-23209
In wildKEV
8.1
22%
Jan 18
Potential RCE with a compromised security key in craft/cms
Affected: >= 5.0.0-RC1, < 5.5.5; >= 4.0.0-RC1, < 4.13.8
Showing 1