Product Detail
CRAFT CMS
https://craftcms.com/
Product Intelligence
Public Exploit/PoC Code :
116
CISA Actively Exploited :
4
Last Vulnerability Seen :
Sep. 16, 2026
Vulnerabilities
The following vulnerabilities are recorded
CRAFT CMS product. You can click on the
vulnerability to view more details.
| Number | Published | CVE ID | Severity | CVSS Score | |
|---|---|---|---|---|---|
| 1 | Mar 04, 2026 | CVE-2026-28695 | HIGH |
7.5
|
|
| 2 | Feb 24, 2026 | CVE-2026-27129 | MEDIUM |
6.5
|
|
| 3 | Feb 24, 2026 | CVE-2026-27128 | MEDIUM |
6.9
|
|
| 4 | Feb 24, 2026 | CVE-2026-27127 | HIGH |
7.0
|
|
| 5 | Feb 24, 2026 | CVE-2026-27126 | MEDIUM |
5.9
|
|
| 6 | Feb 09, 2026 | CVE-2026-25498 | HIGH |
8.6
|
|
| 7 | Feb 09, 2026 | CVE-2026-25497 | HIGH |
8.8
|
|
| 8 | Feb 09, 2026 | CVE-2026-25496 | MEDIUM |
4.8
|
|
| 9 | Feb 09, 2026 | CVE-2026-25495 | HIGH |
8.8
|
|
| 10 | Feb 09, 2026 | CVE-2026-25494 | MEDIUM |
6.9
|
|
| 11 | Feb 09, 2026 | CVE-2026-25493 | MEDIUM |
6.9
|
|
| 12 | Feb 09, 2026 | CVE-2026-25492 | MEDIUM |
6.5
|
|
| 13 | Feb 09, 2026 | CVE-2026-25491 | MEDIUM |
4.8
|
|
| 14 | Feb 03, 2026 | CVE-2020-37071 | CRITICAL |
9.8
|
|
| 15 | Jan 05, 2026 | CVE-2025-68456 | CRITICAL |
9.1
|
|
| 16 | Jan 05, 2026 | CVE-2025-68455 | HIGH |
8.6
|
|
| 17 | Jan 05, 2026 | CVE-2025-68454 | HIGH |
8.8
|
|
| 18 | Jan 05, 2026 | CVE-2025-68437 | MEDIUM |
6.8
|
|
| 19 | Jan 05, 2026 | CVE-2025-68436 | MEDIUM |
6.5
|
|
| 20 | Aug 25, 2025 | CVE-2025-57811 | HIGH |
7.2
|