Exploited: 178
LatestCVE-2026-115732 — Certificate Name Authorization Bypass
VulnFeed.org
AREN

craftcms cms vulnerabilities and fixes

Exploited and high-severity craftcms cms vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.

RSS for this product
  1. 8.8CVE-2026-115935Control panel only API response emulation replaces "securityKey" and reaches server RCERCEFix availablecraftcms cms
    1 min read
  2. 8.8CVE-2026-115938Low privilege condition filter escapes Twig sandbox, recovers "securityKey" and reaches RCEFix availablecraftcms cms
    1 min read
Esc