CI
Product
CiviCRM
by CiviCRM · last CVE Aug 11, 2026
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 3Low 0
Watch

Add CiviCRM to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-72558
8.8
0%
Aug 11
CiviCRM CiviCRM - SQL Injection
Affected: through 6.18.alpha1
CVE-2020-36388
8.8
1%
Jun 17
In CiviCRM before 5.21.3 and 5.22.x through 5.24.x before 5.24.3, users may be able to upload and execute a crafted PHAR archive
Affected: before 5.21.3; 5.22.0 before 5.24.3
Showing 2