BA
Product
Backdrop
10
CVEs
0
On KEV
8.8
Max CVSS
3
New 30D
Severity mix
Critical 0High 3Medium 7Low 0
Watch
Add Backdrop to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-45268 | 8.8 | Feb 3 | A Cross Site Request Forgery (CSRF) vulnerability exists in Backdrop CMS 1.20, which allows Remote Attackers to gain Remote Code Execution (RCE) on the Hosting Webserver via… Affected: 1.20.0 |
| CVE-2026-107914 | 7.8 | Oct 9 | Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when delivering a compressed archive Affected: 1.34.0 before 1.34.5; 1.35.0 before 1.35.1 |
| CVE-2026-110907 | 7.5 | Oct 15 | Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens Affected: 1.35.0 before 1.35.2; 1.34.0 before 1.34.6 |
Showing 3