Skip to content
Craftcms Cms vulnerabilities
-
craftcms cms
Low privilege condition filter escapes Twig sandbox, recovers "securityKey" and reaches RCE
CVE-2026-115938
Fix available
8.7 High
-
craftcms cms
Control panel only API response emulation replaces "securityKey" and reaches server RCE
CVE-2026-115935
Fix available
8.7 High
-
craftcms cms
Craft CMS before 4.18.8 and 5.11.0 Twig create() Blocklist Bypass Leading to RCE
CVE-2026-112777
8.7 High
-
craftcms cms
Craft CMS 5.0.0 before 5.11.0 GraphQL Site-Scope Bypass via Mutations
CVE-2026-112776
9.3 Critical
-
craftcms cms
Craft CMS 5.0.0 before 5.11.0 Verification Code Reuse via users/set-password
CVE-2026-112775
8.7 High
-
craftcms cms
Craft CMS 5.8.0 before 5.11.0 Admin RCE via ContentBlock Field Layout
CVE-2026-112774
8.7 High
-
craftcms cms
Craft CMS 5.0.0 before 5.11.0 RCE via Twig Sandbox Behavior Injection
CVE-2026-112773
8.7 High
-
craftcms cms
Craft CMS 5.0.0 before 5.11.0 RCE via Asset::getMimeType Transform Injection
CVE-2026-112772
8.7 High
-
craftcms cms
Craft CMS before 4.18.8 and 5.11.0 Twig Sandbox Allowlist Bypass via Array Filters
CVE-2026-112771
7.1 High
-
craftcms cms
Craft CMS before 4.18.8 and 5.11.0 Authenticated RCE via Twig group Filter Array-Callable
CVE-2026-112770
8.7 High
-
craftcms cms
Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 RCE via actionCacheUpdates Behavior Injection
CVE-2026-109308
8.7 High
-
craftcms cms
Craft CMS 5.0.0 before 5.10.14 DOM XSS via returnUrl in 2FA Verification
CVE-2026-109307
2.1 Low
-
craftcms cms
Craft CMS 5.0.0 before 5.10.14 Missing Authorization via app/switch-to-licensed-edition
CVE-2026-109306
6.0 Medium
-
craftcms cms
Craft CMS 5.10.2 before 5.10.14 Twig Sandbox Bypass RCE via has some/has every
CVE-2026-109305
8.7 High
-
craftcms cms
Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 Arbitrary File Read via Twig create() DOMDocument
CVE-2026-109304
6.9 Medium
-
craftcms cms
Authenticated RCE via render-components Entry Type overrides
CVE-2026-105985
8.7 High
-
craftcms cms
Craft CMS before 5.11.0 Unauthenticated PII Disclosure via GraphQL
CVE-2026-92594
8.7 High
-
craftcms cms
Craft CMS 5.10.0 before 5.10.13 Authenticated Remote Code Execution
CVE-2026-92593
8.7 High
-
craftcms cms
Craft CMS before 4.18.6 Remote Code Execution via signed cookie
CVE-2026-92592
Public exploit
8.7 High
-
craftcms cms
Craft CMS 5.0.0 before 5.10.13 Environment Secret Exposure via Installer
CVE-2026-92591
8.2 High
-
craftcms cms
Craft CMS 5.7.0 before 5.10.13 Stored XSS via Generated Fields
CVE-2026-92590
5.1 Medium
-
craftcms cms
Craft CMS 5.0.0 before 5.10.13 Broken Access Control via nested-elements/reorder
CVE-2026-92589
5.3 Medium
-
craftcms cms
Low-privilege RCE through element-search eager loading
CVE-2026-79987
Public exploit
8.7 High
-
craftcms cms
Craft CMS before 5.10.12 Remote Code Execution via element-index
CVE-2026-86732
8.7 High
-
craftcms cms
Craft CMS 5.0.0-RC1 before 5.10.12 Permission Escalation via UsersController
CVE-2026-86731
7.1 High
-
craftcms cms
Craft CMS 5.0.0-RC1 before 5.10.12 Behavior Injection RCE
CVE-2026-86730
8.7 High
-
craftcms cms
Authenticated SQL Injection via nested eager-loading criteria
CVE-2026-79991
7.1 High
-
craftcms cms
Craft CMS 5.7.0 before 5.10.12 Information Disclosure via AssetsController
CVE-2026-84802
5.3 Medium
-
craftcms cms
Craft CMS 5.0.0-RC1 before 5.10.11 Authentication Bypass via administrateUsers
CVE-2026-84801
8.7 High
-
craftcms cms
Craft CMS 5.0.0-RC1 before 5.10.11 File Overwrite via assets/replace-file
CVE-2026-84800
7.1 High
-
craftcms cms
Craft CMS before 5.11.0 PII Disclosure via GraphQL User Relations
CVE-2026-84799
5.3 Medium
-
craftcms cms
Craft CMS before 5.10.11 Authorization Bypass via actionDeleteForSite
CVE-2026-84798
7.1 High
-
craftcms cms
GQL entry mutation `siteId` bypasses schema site scope, enabling cross-site content read/write/delete
CVE-2026-79990
8.7 High
-
craftcms cms
Craft CMS 5.0.0-RC1 before 5.10.11 Authorization Bypass via actionDuplicate
CVE-2026-84797
5.3 Medium
-
craftcms cms
Craft CMS 5.0.0-RC1 before 5.10.11 GraphQL Entry Mutation Site Scope Bypass
CVE-2026-84796
8.7 High
-
craftcms cms
Craft CMS before 5.10.11 Authentication Bypass via Admin Flag Inheritance
CVE-2026-84795
9.2 Critical
-
craftcms cms
Craft CMS 5.0.0 through 5.10.10 Authorization Bypass via assets/move-asset
CVE-2026-84794
7.1 High
-
craftcms cms
Craft CMS 5.0.0-RC1 before 5.10.11 Stored XSS via site name
CVE-2026-84793
4.8 Medium
-
craftcms cms
Craft CMS before 5.10.11 Broken Access Control via element-indexes
CVE-2026-84792
5.3 Medium
-
craftcms cms
Authenticated RCE through Twig sandbox escape
CVE-2026-79988
8.7 High
-
craftcms cms
Authenticated RCE via `condition.config` JSON cleanse bypass
CVE-2026-78416
8.7 High
-
craftcms cms
Craft CMS 5.0.0-RC1 before 5.10.6 SSRF via GraphQL asset mutation
CVE-2026-72784
6.9 Medium
-
craftcms cms
Craft CMS before 5.10.5 WebAuthn Assertion Replay via login-with-passkey
CVE-2026-72780
Fix available
7.1 High
-
craftcms cms
Craft CMS 5.0.0-RC1 before 5.10.6 Arbitrary File Read via SplFileObject
CVE-2026-72779
Fix available
8.7 High
-
craftcms cms
Craft CMS 5.0.0-RC1 before 5.10.6 Environment Variable Leak
CVE-2026-72782
Fix available
7.1 High
-
craftcms cms
Craft CMS before 5.10.6 Authorization Bypass via structures/move-element
CVE-2026-72785
Fix available
9.3 Critical
-
craftcms cms
Craft CMS 5.0.0-RC1 before 5.10.6 Path Traversal via ensurePathIsContained
CVE-2026-72783
Fix available
6.9 Medium
-
craftcms cms
Craft CMS 5.0.0-RC1 before 5.10.8 Stored XSS via Draft Name
CVE-2026-72787
Fix available
5.1 Medium
-
craftcms cms
Arbitrary user password reset leading to administrator account takeover
CVE-2026-79989
Fix available
8.7 High
-
craftcms cms
Craft CMS 5.0.0-RC1 before 5.10.8 Authentication Bypass via Password Reset
CVE-2026-72786
Fix available
7.1 High
- Show olderLoading…