Product Detail
CRAFT CMS
https://craftcms.com/
Product Intelligence
Public Exploit/PoC Code :
116
CISA Actively Exploited :
4
Last Vulnerability Seen :
Nov. 06, 2026
Vulnerabilities
The following vulnerabilities are recorded
CRAFT CMS product. You can click on the
vulnerability to view more details.
| Number | Published | CVE ID | Severity | CVSS Score | |
|---|---|---|---|---|---|
| 1 | Nov 06, 2026 | CVE-2026-123491 | HIGH |
8.8
|
|
| 2 | Nov 06, 2026 | CVE-2026-123490 | HIGH |
8.8
|
|
| 3 | Nov 06, 2026 | CVE-2026-123489 | HIGH |
7.1
|
|
| 4 | Nov 06, 2026 | CVE-2026-123488 | CRITICAL |
9.8
|
|
| 5 | Oct 23, 2026 | CVE-2026-115938 | HIGH |
8.8
|
|
| 6 | Oct 23, 2026 | CVE-2026-115935 | HIGH |
8.8
|
|
| 7 | Oct 19, 2026 | CVE-2026-112777 | HIGH |
8.7
|
|
| 8 | Oct 19, 2026 | CVE-2026-112776 | CRITICAL |
9.8
|
|
| 9 | Oct 19, 2026 | CVE-2026-112775 | HIGH |
8.7
|
|
| 10 | Oct 19, 2026 | CVE-2026-112774 | HIGH |
8.7
|
|
| 11 | Oct 19, 2026 | CVE-2026-112773 | HIGH |
8.8
|
|
| 12 | Oct 19, 2026 | CVE-2026-112772 | HIGH |
8.8
|
|
| 13 | Oct 19, 2026 | CVE-2026-112771 | HIGH |
7.1
|
|
| 14 | Oct 19, 2026 | CVE-2026-112770 | HIGH |
8.8
|
|
| 15 | Oct 12, 2026 | CVE-2026-109308 | HIGH |
8.8
|
|
| 16 | Oct 12, 2026 | CVE-2026-109307 | MEDIUM |
4.7
|
|
| 17 | Oct 12, 2026 | CVE-2026-109306 | MEDIUM |
6.0
|
|
| 18 | Oct 12, 2026 | CVE-2026-109305 | HIGH |
8.8
|
|
| 19 | Oct 12, 2026 | CVE-2026-109304 | MEDIUM |
6.9
|
|
| 20 | Oct 06, 2026 | CVE-2026-105985 | HIGH |
8.8
|