Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

High8.7Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the "has some" and "has every" operators.CVE-2026-109305 · CVE.org · NIST NVD · Craft CMS, PHPOct 12, 2026
Low2.1Craft CMS 5.0.0 before 5.10.14 DOM XSS via returnUrl in 2FA VerificationCVE-2026-109307 · craftcms · cms · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Craft CMSEPSS 0.2%Oct 12, 2026
High7.1Craft CMS is a content management system (CMS).CVE-2026-44012 · CVE.org · NIST NVD · Craft CMSMay 12, 2026
High8.6Craft CMS is a content management system (CMS).CVE-2026-44011 · CVE.org · NIST NVD · Craft CMSMay 12, 2026
High7.1Craft CMS is a content management system (CMS).CVE-2026-44010 · CVE.org · NIST NVD · Craft CMSMay 12, 2026
Medium5.5Craft CMS is a content management system (CMS).CVE-2026-41130 · CVE.org · NIST NVD · Craft CMSApr 22, 2026
Medium5.5Craft CMS is a content management system (CMS).CVE-2026-41129 · CVE.org · NIST NVD · Craft CMSApr 22, 2026
Medium5.3Craft CMS is a content management system (CMS).CVE-2026-41128 · CVE.org · NIST NVD · Craft CMSApr 22, 2026
High8.7Craft Commerce is an ecommerce platform for Craft CMS.CVE-2026-32272 · CVE.org · NIST NVD · Craft CMSApr 13, 2026
High7.7Craft Commerce is an ecommerce platform for Craft CMS.CVE-2026-32271 · CVE.org · NIST NVD · Craft CMSApr 13, 2026
Low1.7Craft Commerce is an ecommerce platform for Craft CMS.CVE-2026-32270 · CVE.org · NIST NVD · Craft CMSApr 13, 2026
Medium4.9Craft CMS is a content management system (CMS).CVE-2026-33162 · craftcms · craft cms · CVE.org · NIST NVD · Craft CMSMar 24, 2026
Low1.3Craft CMS is a content management system (CMS).CVE-2026-33161 · craftcms · craft cms · CVE.org · NIST NVD · Craft CMSMar 24, 2026
Low2.7Craft CMS is a content management system (CMS).CVE-2026-33160 · craftcms · craft cms · CVE.org · NIST NVD · Craft CMSMar 24, 2026
Medium6.9Craft CMS is a content management system (CMS).CVE-2026-33159 · craftcms · craft cms · CVE.org · NIST NVD · Craft CMSMar 24, 2026
Medium4.9Craft CMS is a content management system (CMS).CVE-2026-33158 · craftcms · craft cms · CVE.org · NIST NVD · Craft CMSMar 24, 2026
High8.6Craft CMS is a content management system (CMS).CVE-2026-33157 · craftcms · craft cms · CVE.org · NIST NVD · Craft CMSMar 24, 2026
Medium5.5The Sprig Plugin for Craft CMS is a reactive Twig component framework for Craft CMS.CVE-2026-27131 · CVE.org · NIST NVD · Craft CMSMar 23, 2026
Medium5.3Craft CMS is a content management system (CMS).CVE-2026-33051 · craftcms · craft cms · CVE.org · NIST NVD · Craft CMSMar 20, 2026
High8.7The Azure Blob Storage for Craft CMS plugin provides an Azure Blob Storage integration for Craft CMS.CVE-2026-32268 · CVE.org · NIST NVD · Azure, Craft CMSMar 18, 2026
Low2.4The Google Cloud Storage for Craft CMS plugin provides a Google Cloud Storage integration for Craft CMS.CVE-2026-32266 · CVE.org · NIST NVD · Craft CMS, GoogleMar 18, 2026
Medium6.9The Amazon S3 for Craft CMS plugin provides an Amazon S3 integration for Craft CMS.CVE-2026-32265 · CVE.org · NIST NVD · Craft CMSMar 18, 2026
High7.7Craft CMS is a content management system (CMS).CVE-2026-32267 · craftcms · craft cms · CVE.org · NIST NVD · Craft CMSMar 16, 2026
High8.6Craft CMS is a content management system (CMS).CVE-2026-32264 · craftcms · craft cms · CVE.org · NIST NVD · Craft CMSMar 16, 2026
High8.6Craft CMS is a content management system (CMS).CVE-2026-32263 · craftcms · craft cms · CVE.org · NIST NVD · Craft CMSMar 16, 2026